NetSight
medium5.0

CVE-2024-10933

In OpenBSD 7.5 before errata 009 and OpenBSD 7.4 before errata 022, exclude any '/' in readdir name validation to avoid unexpected directory traversal on untru…

Impact

In OpenBSD 7.5 before errata 009 and OpenBSD 7.4 before errata 022, exclude any '/' in readdir name validation to avoid unexpected directory traversal on untrusted file systems.

Affected products

VendorProductAffected versions
OpenbsdOpenbsd
before 7.4
Version 7.4

Weakness classification

References