PT-2024-16649
CVE-2024-10933
·
تاريخ النشر
2024-12-05
·
تاريخ التحديث
2025-09-23
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
OpenBSD versions 7.4 through 7.5 before errata 009 and 022
Description
The issue arises from improper validation of readdir names, allowing unexpected directory traversal on untrusted file systems when a '/' is encountered. This can be mitigated by excluding any '/' in readdir name validation.
Recommendations
For OpenBSD version 7.4, apply errata 022 to resolve the issue.
For OpenBSD version 7.5, apply errata 009 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾