CVE-2013-20001 in OpenZFS

الملخص

بحسب MITRE • 13/02/2021

An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• حجز: 12/02/2021
• إفشاء: 13/02/2021
• الاعتدال: تمت الموافقة
• إدخال: VDB-169894
• CPE: جاهز
• CWE: CWE-284 (مؤكد)
• CVSS: 7.5 (NVD)
• EPSS: 0.00241
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-20001
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-20001
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-20001/