Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2025.0013
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2025-0013)
Zusammenfassung:	The remote host is missing an update for the 'openafs' package(s) announced via the MGASA-2025-0013 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'openafs' package(s) announced via the MGASA-2025-0013 advisory. Vulnerability Insight: A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix client. (CVE-2024-10394) An authenticated user can provide a malformed ACL to the fileserver's StoreACL RPC, causing the fileserver to crash. (CVE-2024-10396) A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code. (CVE-2024-10397) Affected Software/OS: 'openafs' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2024-10394 Common Vulnerability Exposure (CVE) ID: CVE-2024-10396 Common Vulnerability Exposure (CVE) ID: CVE-2024-10397
Copyright	Copyright (C) 2025 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.