USN-6511-1: OpenZFS vulnerability

Reference Links

• https://ubuntu.com/security/CVE-2013-20001
• https://launchpad.net/ubuntu/+source/zfs-linux/2.1.9-2ubuntu1.2
• https://launchpad.net/ubuntu/+source/zfs-linux/2.1.5-1ubuntu6~22.04.2
• https://launchpad.net/ubuntu/+source/zfs-linux/0.8.3-1ubuntu12.16
• https://ubuntu.com/security/notices/USN-6511-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2013-20001

Frequently Asked Questions

• What is the vulnerability in USN-6511-1?

  The vulnerability in USN-6511-1 is an OpenZFS vulnerability that incorrectly handles IPv6 address data.

• What is the impact of the vulnerability in USN-6511-1?

  The vulnerability in USN-6511-1 could result in IPv6 restrictions not being applied as expected.

• Which software versions are affected by the vulnerability in USN-6511-1?

  The software versions affected by the vulnerability in USN-6511-1 are libuutil3linux 2.1.9-2ubuntu1.2 and zfsutils-linux 2.1.9-2ubuntu1.2 on Ubuntu 23.04, libuutil3linux 2.1.5-1ubuntu6~22.04.2 and zfsutils-linux 2.1.5-1ubuntu6~22.04.2 on Ubuntu 22.04, and libuutil1linux 0.8.3-1ubuntu12.16 and zfsutils-linux 0.8.3-1ubuntu12.16 on Ubuntu 20.04.

• How do I fix the vulnerability in USN-6511-1?

  To fix the vulnerability in USN-6511-1, you need to update the affected software packages to their respective fixed versions: libuutil3linux 2.1.9-2ubuntu1.2 and zfsutils-linux 2.1.9-2ubuntu1.2 on Ubuntu 23.04, libuutil3linux 2.1.5-1ubuntu6~22.04.2 and zfsutils-linux 2.1.5-1ubuntu6~22.04.2 on Ubuntu 22.04, and libuutil1linux 0.8.3-1ubuntu12.16 and zfsutils-linux 0.8.3-1ubuntu12.16 on Ubuntu 20.04.

• Where can I find more information about the vulnerability in USN-6511-1?

  You can find more information about the vulnerability in USN-6511-1 on the Ubuntu Security Notices website (CVE-2013-20001) and the respective launchpad.net pages for the fixed versions of the affected software packages.