CVE-2024-10394

NameCVE-2024-10394
DescriptionA local user can bypass the OpenAFS PAG (Process Authentication Group) ...
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs1087406, 1087407

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
openafs (PTS)bullseye1.8.6-5vulnerable
bookworm1.8.9-1vulnerable
sid1.8.13-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
openafssource(unstable)1.8.13-11087406, 1087407

Notes

http://openafs.org/pages/security/OPENAFS-SA-2024-001.txt
https://lists.openafs.org/pipermail/openafs-devel/2024-November/020961.html

Search for package or bug name: Reporting problems