CVE-2013-20001

Katalog CVE

CVSS 7.5 · High EPSS 2,1%

Kerentanan pada openzfs. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied.

Rincian

Terbit di NVD

12 Februari 2021

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

2,1% peluang dieksploitasi; lebih tinggi dari 81,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/openzfs/zfs/issues/1894#issuecomment-30693652 exploit · advisory pihak ketiga
• https://github.com/openzfs/zfs/releases release notes · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2024/03/msg00019.html
• https://lists.debian.org/debian-lts-announce/2025/04/msg00009.html