Vulnerability · Published Nov 14, 2024 · Assigned by fedora
CVE-2024-10394Theft of credentials in Unix client PAGs
High 8.4
In plain English
A high-severity security flaw in OpenAFS from The OpenAFS Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 4.0)8.4High
Exploit odds (30 days)0.2%top 89.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number, effectively joining the PAG and letting the user steal the credentials in that PAG.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | openafs | 1.8.9-1+deb12u1 | DEBIAN-CVE-2024-10394 |
| Debian:12 | openafs | 1.8.9-1+deb12u1 | DSA-5842-1 |
| Debian:13 | openafs | 1.8.13-1 | DEBIAN-CVE-2024-10394 |
| Ubuntu:22.04:LTS | openafs | no fix listed | UBUNTU-CVE-2024-10394 |
| Ubuntu:24.04:LTS | openafs | no fix listed | UBUNTU-CVE-2024-10394 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| The OpenAFS Foundation | OpenAFS | 1.0 – before 1.6.241.8.0 – before 1.8.12.21.9.0 – before 1.9.1 |
Weakness: CWE-305 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N