Summary
Ein Angreifer kann mehrere Schwachstellen in OpenBSD ausnutzen, um Informationen offenzulegen oder einen Denial of Service zu verursachen.
Product
OpenBSD ist ein Unix-artiges Betriebssystem, abgeleitet von BSD-Unix.
Vulnerabilities 3
-
High 7.9
OpenBSD vmm GDTR limits
In OpenBSD 7.4 before errata 014, vmm(4) did not restore GDTR limits properly on Intel (VMX) CPUs.
-
High 7.5
OpenBSD httpd(8) null dereference
In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.
-
Medium 5.0
OpenBSD readdir directory traversal
In OpenBSD 7.5 before errata 009 and OpenBSD 7.4 before errata 022, exclude any '/' in readdir name validation to avoid unexpected directory traversal on untrusted file systems.
Revision history
-
#1
Initiale Fassung
References
-
NIST Vulnerability Database vom 2024-12-05
https://nvd.nist.gov/vuln/detail/CVE-2024-10933
-
NIST Vulnerability Database vom 2024-12-05
https://nvd.nist.gov/vuln/detail/CVE-2024-11148
-
NIST Vulnerability Database vom 2024-12-05
https://nvd.nist.gov/vuln/detail/CVE-2024-11149