CVE-2024-29937

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

NFS in a BSD derived codebase, as used in OpenBSD through 7.4 and FreeBSD through 14.0-RELEASE, allows remote attackers to execute arbitrary code via a bug that is unrelated to memory corruption.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

VendorProductVersions
n/an/an/a
openbsdopenbsd< 7.4
freebsdfreebsd< 14.0

References

Timeline

Published
Apr 11, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-29948.8A vulnerability was found in Tenda FH1203 2.0.1.6. It has been declared as critical. Affected by this vulnerability is the function GetParenCVE-2024-299418.0Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create credentials for any CVE-2024-299439.8An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This CVE-2024-299448.4An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent proceCVE-2024-299457.2In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the software potentially exposes authentication tokens during the token validatCVE-2024-299468.1In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This couldCVE-2024-299472.7There is a NULL dereference pointer vulnerability in some Hikvision NVRs. Due to an insufficient validation of a parameter in a message, an CVE-2024-299483.8There is an out-of-bounds read vulnerability in some Hikvision NVRs. An authenticated attacker could exploit this vulnerability by sending sCVE-2024-299497.2There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execCVE-2024-29955.4A vulnerability was found in NUUO Camera up to 20240319 and classified as problematic. This issue affects some unknown processing of the filCVE-2024-299505.9The class FileTransfer implemented in Brocade SANnav before v2.3.1, v2.3.0a, uses the ssh-rsa signature scheme, which has a SHA-1 hash. The CVE-2024-299515.7Brocade SANnav before v2.3.1 and v2.3.0a uses the SHA-1 hash in internal SSH ports that are not open to remote connection.