PT-2024-16649
CVE-2024-10933
·
Published
2024-12-05
·
Updated
2025-09-23
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
OpenBSD versions 7.4 through 7.5 before errata 009 and 022
Description
The issue arises from improper validation of readdir names, allowing unexpected directory traversal on untrusted file systems when a '/' is encountered. This can be mitigated by excluding any '/' in readdir name validation.
Recommendations
For OpenBSD version 7.4, apply errata 022 to resolve the issue.
For OpenBSD version 7.5, apply errata 009 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾