CVE-2013-20001: High severity openzfs vulnerability
An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability CVE-2013-20001?
The vulnerability CVE-2013-20001 is an issue discovered in OpenZFS through version 2.0.3 that allows unauthorized access to an NFS share when exported to IPv6 addresses.
How does the vulnerability CVE-2013-20001 affect OpenZFS?
The vulnerability CVE-2013-20001 affects OpenZFS by silently failing to parse IPv6 address data when exporting an NFS share, allowing access to everyone.
What is the severity of vulnerability CVE-2013-20001?
The severity of vulnerability CVE-2013-20001 is high with a severity value of 7.5.
How can I fix the vulnerability CVE-2013-20001 in OpenZFS?
To fix the vulnerability CVE-2013-20001 in OpenZFS, you should update to a version of OpenZFS that is newer than 2.0.3.
Where can I find more information about the vulnerability CVE-2013-20001?
You can find more information about the vulnerability CVE-2013-20001 in the references provided: [Link 1](https://github.com/openzfs/zfs/issues/1894#issuecomment-30693652), [Link 2](https://github.com/openzfs/zfs/releases).