CVE-2024-10397 HIGH

CVE-2024-10397: Preallocated buffer overflows in XDR responses

Vendor The Openafs Foundation
Product OpenAFS
Weakness CWE-787
Published November 14, 2024
Last update December 23, 2025
View on NVD All CVEs

CVSS base score

7.7/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code.

Key dates

02Disclosure timeline

November 14, 2024 CVE published
December 23, 2025 Record updated