NFS in a BSD derived codebase, as used in OpenBSD through 7.4 and FreeBSD through 14.0-RELEASE, allows remote attackers to execute arbitrary code via a bug that is unrelated to memory corruption.
References
Configurations
No configuration.
History
13 Mar 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-94 |
21 Nov 2024, 09:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://news.ycombinator.com/item?id=39778203 - | |
| References | () https://t2.fi/schedule/2024/ - | |
| References | () https://www.signedness.org/t2.fi.2024/ - | |
| References | () https://www.youtube.com/watch?v=i_JOkHaCdzk - |
27 Aug 2024, 16:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
11 Apr 2024, 01:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-11 01:25
Updated : 2025-03-13 16:15
NVD link : CVE-2024-29937
Mitre link : CVE-2024-29937
CVE.ORG link : CVE-2024-29937
JSON object : View
Products Affected
No product.
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')