CVE-2024-10934

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and server implementation, do not use uninitialized variable in error handling of NFS server.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415CWE-457

Affected software

No affected versions have been published.

Timeline

Published
Nov 15, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-109357.5automatic1111/stable-diffusion-webui version 1.10.0 contains a vulnerability where the server fails to handle excessive characters appended CVE-2024-109368.8The String locator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.6 via deserializatioCVE-2024-109375.3The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress is vulnerable to SensCVE-2024-109386.5The OVRI Payment plugin for WordPress contains malicious .htaccess files in version 1.7.0. The files contain directives to prevent the execuCVE-2024-109394.8The Image Widget WordPress plugin before 4.4.11 does not sanitise and escape some of its Image Widget settings, which could allow high priviCVE-2024-10947.3The Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling plugin for WordPress is vulnerable to unCVE-2024-109405.3A vulnerability in langchain-core versions >=0.1.17,<0.1.53, >=0.2.0,<0.2.43, and >=0.3.0,<0.3.15 allows unauthorized users to read arbitrarCVE-2024-109416.5A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affCVE-2024-109427.5The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.89CVE-2024-109439.1An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and coCVE-2024-109448.4A Remote Code Execution vulnerability exists in the affected product. The vulnerability requires a high level of permissions and exists due CVE-2024-109457.3A Local Privilege Escalation vulnerability exists in the affected product. The vulnerability requires a local, low privileged threat actor t
CVE-2024-10934: Critical severity, CVSS 9.8 | Vulnix