Read the docs
TI-2024-09626 Aliases CVE-2024-10396GHSA-mqv3-f225-3xw2

Fileserver crash and possible information leak on StoreACL/FetchACL

Priority LOW 30CWE-772Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-772.

Summary

An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash, possibly expose uninitialized memory, and possibly store garbage data in the audit log. Malformed ACLs provided in responses to client FetchACL RPCs can cause client processes to crash and possibly expose uninitialized memory into other ACLs stored on the server.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00559 46th percentileScored 2026-11-07
Fix Fixed OpenAFS (The OpenAFS Foundation): 1.6.24, 1.8.12.2, 1.9.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
The OpenAFS FoundationOpenAFS1.0 to before 1.6.24; 1.8.0 to before 1.8.12.2; 1.9.0 to before 1.9.11.6.24, 1.8.12.2, 1.9.1Patch availableCNA
  • OpenAFS VendorThe OpenAFS Foundation Affected 1.0 to before 1.6.24; 1.8.0 to before 1.8.12.2; 1.9.0 to before 1.9.1 Fixed in 1.6.24, 1.8.12.2, 1.9.1 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:*1.0 to before 1.6.25; 1.8.0 to before 1.8.13VulnerableThe OpenAFS Foundation
cpe:2.3:a:openafs:openafs:1.9.0:*:*:*:*:*:*:*1.9.0VulnerableThe OpenAFS Foundation
  • cpe:2.3:a:openafs:openafs:*:*:*:*:*:*:*:* Versions 1.0 to before 1.6.25; 1.8.0 to before 1.8.13 Vulnerable ·The OpenAFS Foundation
  • cpe:2.3:a:openafs:openafs:1.9.0:*:*:*:*:*:*:* Versions 1.9.0 Vulnerable ·The OpenAFS Foundation

Remediation

  • Fix · CNA OpenAFS (The OpenAFS Foundation) Fixed in 1.6.24, 1.8.12.2, 1.9.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    The OpenAFS Foundation OpenAFS 1.6.24, 1.8.12.2, 1.9.1

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2024-09624 Theft of credentials in Unix client PAGsPriority LOW 36
    • TI-2024-09627 Preallocated buffer overflows in XDR responsesPriority LOW 34
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-10396
  2. 2026-10-03 Alias added: GHSA-mqv3-f225-3xw2

References

Other 2

  • TI-2009-01186 Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through… CVSS 2.0HIGH 10.0
  • TI-2003-00025 Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR… CVSS 2.0HIGH 7.5
  • TI-2018-12102 An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. CVSS 3.0CRITICAL 9.8
  • TI-2009-01185 The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58… CVSS 2.0HIGH 7.8
  • TI-2018-12104 An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. CVSS 3.0HIGH 7.5
  • TI-2017-12736 OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote… CVSS 3.0HIGH 7.5
See all 35 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences