CVE-2013-20001

Source
https://nvd.nist.gov/vuln/detail/CVE-2013-20001
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2013-20001.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2013-20001
Related
Published
2021-02-12T20:15:12Z
Modified
2024-12-03T05:54:15.472777Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied.

References

Affected packages

Debian:11 / zfs-linux

Package

Name
zfs-linux
Purl
pkg:deb/debian/zfs-linux?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.6.5.5-1
0.6.5.6-1
0.6.5.6-2
0.6.5.7-1
0.6.5.7-2~bpo8+1
0.6.5.7-2
0.6.5.8-1~bpo8+1
0.6.5.8-1
0.6.5.8-2~bpo8+1
0.6.5.8-2
0.6.5.8-3
0.6.5.9-1
0.6.5.9-2~bpo8+1
0.6.5.9-2
0.6.5.9-3
0.6.5.9-4
0.6.5.9-5~bpo8+1
0.6.5.9-5
0.6.5.9-5+sparc64
0.6.5.10-1
0.6.5.11-1~bpo8+1
0.6.5.11-1~bpo9+1
0.6.5.11-1
0.7.3-1
0.7.3-2
0.7.3-3~bpo8+1
0.7.3-3~bpo9+1
0.7.3-3
0.7.4-1~bpo8+1
0.7.4-1~bpo9+1
0.7.4-1
0.7.5-1~bpo9+1
0.7.5-1
0.7.6-1~bpo8+1
0.7.6-1~bpo9+1
0.7.6-1
0.7.9-0.1
0.7.9-1
0.7.9-2
0.7.9-3~bpo8+1
0.7.9-3~bpo9+1
0.7.9-3
0.7.11-1~bpo8+1
0.7.11-1~bpo9+1
0.7.11-1
0.7.11-2
0.7.11-3
0.7.12-1~bpo9+1
0.7.12-1
0.7.12-2
0.7.12-3
0.7.12-4
0.7.12-5
0.7.13-1~bpo9+1
0.7.13-1~bpo10+1
0.7.13-1
0.8.0~rc3-1
0.8.0~rc4-1
0.8.0-1
0.8.0-2
0.8.1-1
0.8.1-2
0.8.1-3
0.8.1-4~bpo10+1
0.8.1-4
0.8.2-1
0.8.2-2~bpo10+1
0.8.2-2
0.8.2-3~bpo10+1
0.8.2-3
0.8.2-4
0.8.2-5
0.8.3-1~bpo10+1
0.8.3-1
0.8.3-2
0.8.4-1~bpo10+1
0.8.4-1
0.8.4-2~bpo10+1
0.8.4-2
0.8.5-1
0.8.5-2~bpo10+1
0.8.5-2
0.8.5-3~bpo10+1
0.8.5-3
0.8.6-1~bpo10+1
0.8.6-1

2.*

2.0.0-1~exp1
2.0.1-1~exp1
2.0.1-1
2.0.1-2
2.0.1-3
2.0.2-1~bpo10+1
2.0.2-1
2.0.3-1~bpo10+1
2.0.3-1
2.0.3-2
2.0.3-3
2.0.3-4
2.0.3-5
2.0.3-6
2.0.3-7
2.0.3-8~bpo10+1
2.0.3-8
2.0.3-9~bpo10+1
2.0.3-9
2.0.3-9+deb11u1
2.0.6-1~bpo10+1
2.0.6-1~bpo11+1
2.0.6-1
2.0.6-2
2.0.7-1~bpo10+1
2.1.1-1
2.1.1-2
2.1.1-3
2.1.2-1~bpo11+1
2.1.2-1
2.1.4-1~bpo11+1
2.1.4-1
2.1.5-1~bpo11+1
2.1.5-1
2.1.6-1
2.1.6-2
2.1.6-3~bpo11+1
2.1.6-3
2.1.7-1~bpo11+1
2.1.7-1
2.1.7-2
2.1.8-1
2.1.9-1~bpo11+1
2.1.9-1
2.1.9-2
2.1.9-3~bpo11+1
2.1.9-3
2.1.9-4
2.1.11-1~bpo11+1
2.1.11-1
2.1.12-1
2.1.12-2~bpo12+1
2.1.12-2
2.1.13-1~bpo11+1
2.1.13-1~bpo12+1
2.1.13-1
2.1.13-2~bpo11+1
2.1.13-2~bpo12+1
2.1.13-2
2.1.14-1~bpo11+1
2.1.14-1~bpo12+1
2.1.14-1
2.2.0-1~exp1
2.2.1-1~exp1
2.2.1-1~exp2
2.2.2-1~exp1
2.2.2-1
2.2.2-2
2.2.2-3~bpo12+1
2.2.2-3
2.2.2-4~bpo12+1
2.2.2-4
2.2.2-5~exp1
2.2.2-5~exp2
2.2.2-5~exp3
2.2.3-1~bpo12+1
2.2.3-1
2.2.3-2~bpo12+1
2.2.3-2
2.2.4-1~bpo12+1
2.2.4-1
2.2.4-2
2.2.5-1~bpo12+1
2.2.5-1
2.2.6-1~bpo12+1
2.2.6-1~bpo12+2
2.2.6-1~bpo12+3
2.2.6-1
2.2.6-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / zfs-linux

Package

Name
zfs-linux
Purl
pkg:deb/debian/zfs-linux?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.6.5.5-1
0.6.5.6-1
0.6.5.6-2
0.6.5.7-1
0.6.5.7-2~bpo8+1
0.6.5.7-2
0.6.5.8-1~bpo8+1
0.6.5.8-1
0.6.5.8-2~bpo8+1
0.6.5.8-2
0.6.5.8-3
0.6.5.9-1
0.6.5.9-2~bpo8+1
0.6.5.9-2
0.6.5.9-3
0.6.5.9-4
0.6.5.9-5~bpo8+1
0.6.5.9-5
0.6.5.9-5+sparc64
0.6.5.10-1
0.6.5.11-1~bpo8+1
0.6.5.11-1~bpo9+1
0.6.5.11-1
0.7.3-1
0.7.3-2
0.7.3-3~bpo8+1
0.7.3-3~bpo9+1
0.7.3-3
0.7.4-1~bpo8+1
0.7.4-1~bpo9+1
0.7.4-1
0.7.5-1~bpo9+1
0.7.5-1
0.7.6-1~bpo8+1
0.7.6-1~bpo9+1
0.7.6-1
0.7.9-0.1
0.7.9-1
0.7.9-2
0.7.9-3~bpo8+1
0.7.9-3~bpo9+1
0.7.9-3
0.7.11-1~bpo8+1
0.7.11-1~bpo9+1
0.7.11-1
0.7.11-2
0.7.11-3
0.7.12-1~bpo9+1
0.7.12-1
0.7.12-2
0.7.12-3
0.7.12-4
0.7.12-5
0.7.13-1~bpo9+1
0.7.13-1~bpo10+1
0.7.13-1
0.8.0~rc3-1
0.8.0~rc4-1
0.8.0-1
0.8.0-2
0.8.1-1
0.8.1-2
0.8.1-3
0.8.1-4~bpo10+1
0.8.1-4
0.8.2-1
0.8.2-2~bpo10+1
0.8.2-2
0.8.2-3~bpo10+1
0.8.2-3
0.8.2-4
0.8.2-5
0.8.3-1~bpo10+1
0.8.3-1
0.8.3-2
0.8.4-1~bpo10+1
0.8.4-1
0.8.4-2~bpo10+1
0.8.4-2
0.8.5-1
0.8.5-2~bpo10+1
0.8.5-2
0.8.5-3~bpo10+1
0.8.5-3
0.8.6-1~bpo10+1
0.8.6-1

2.*

2.0.0-1~exp1
2.0.1-1~exp1
2.0.1-1
2.0.1-2
2.0.1-3
2.0.2-1~bpo10+1
2.0.2-1
2.0.3-1~bpo10+1
2.0.3-1
2.0.3-2
2.0.3-3
2.0.3-4
2.0.3-5
2.0.3-6
2.0.3-7
2.0.3-8~bpo10+1
2.0.3-8
2.0.3-9~bpo10+1
2.0.3-9
2.0.6-1~bpo10+1
2.0.6-1~bpo11+1
2.0.6-1
2.0.6-2
2.0.7-1~bpo10+1
2.1.1-1
2.1.1-2
2.1.1-3
2.1.2-1~bpo11+1
2.1.2-1
2.1.4-1~bpo11+1
2.1.4-1
2.1.5-1~bpo11+1
2.1.5-1
2.1.6-1
2.1.6-2
2.1.6-3~bpo11+1
2.1.6-3
2.1.7-1~bpo11+1
2.1.7-1
2.1.7-2
2.1.8-1
2.1.9-1~bpo11+1
2.1.9-1
2.1.9-2
2.1.9-3~bpo11+1
2.1.9-3
2.1.9-4
2.1.11-1~bpo11+1
2.1.11-1
2.1.11-1+deb12u1
2.1.12-1
2.1.12-2~bpo12+1
2.1.12-2
2.1.13-1~bpo11+1
2.1.13-1~bpo12+1
2.1.13-1
2.1.13-2~bpo11+1
2.1.13-2~bpo12+1
2.1.13-2
2.1.14-1~bpo11+1
2.1.14-1~bpo12+1
2.1.14-1
2.2.0-1~exp1
2.2.1-1~exp1
2.2.1-1~exp2
2.2.2-1~exp1
2.2.2-1
2.2.2-2
2.2.2-3~bpo12+1
2.2.2-3
2.2.2-4~bpo12+1
2.2.2-4
2.2.2-5~exp1
2.2.2-5~exp2
2.2.2-5~exp3
2.2.3-1~bpo12+1
2.2.3-1
2.2.3-2~bpo12+1
2.2.3-2
2.2.4-1~bpo12+1
2.2.4-1
2.2.4-2
2.2.5-1~bpo12+1
2.2.5-1
2.2.6-1~bpo12+1
2.2.6-1~bpo12+2
2.2.6-1~bpo12+3
2.2.6-1
2.2.6-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / zfs-linux

Package

Name
zfs-linux
Purl
pkg:deb/debian/zfs-linux?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.2-1

Affected versions

0.*

0.6.5.5-1
0.6.5.6-1
0.6.5.6-2
0.6.5.7-1
0.6.5.7-2~bpo8+1
0.6.5.7-2
0.6.5.8-1~bpo8+1
0.6.5.8-1
0.6.5.8-2~bpo8+1
0.6.5.8-2
0.6.5.8-3
0.6.5.9-1
0.6.5.9-2~bpo8+1
0.6.5.9-2
0.6.5.9-3
0.6.5.9-4
0.6.5.9-5~bpo8+1
0.6.5.9-5
0.6.5.9-5+sparc64
0.6.5.10-1
0.6.5.11-1~bpo8+1
0.6.5.11-1~bpo9+1
0.6.5.11-1
0.7.3-1
0.7.3-2
0.7.3-3~bpo8+1
0.7.3-3~bpo9+1
0.7.3-3
0.7.4-1~bpo8+1
0.7.4-1~bpo9+1
0.7.4-1
0.7.5-1~bpo9+1
0.7.5-1
0.7.6-1~bpo8+1
0.7.6-1~bpo9+1
0.7.6-1
0.7.9-0.1
0.7.9-1
0.7.9-2
0.7.9-3~bpo8+1
0.7.9-3~bpo9+1
0.7.9-3
0.7.11-1~bpo8+1
0.7.11-1~bpo9+1
0.7.11-1
0.7.11-2
0.7.11-3
0.7.12-1~bpo9+1
0.7.12-1
0.7.12-2
0.7.12-3
0.7.12-4
0.7.12-5
0.7.13-1~bpo9+1
0.7.13-1~bpo10+1
0.7.13-1
0.8.0~rc3-1
0.8.0~rc4-1
0.8.0-1
0.8.0-2
0.8.1-1
0.8.1-2
0.8.1-3
0.8.1-4~bpo10+1
0.8.1-4
0.8.2-1
0.8.2-2~bpo10+1
0.8.2-2
0.8.2-3~bpo10+1
0.8.2-3
0.8.2-4
0.8.2-5
0.8.3-1~bpo10+1
0.8.3-1
0.8.3-2
0.8.4-1~bpo10+1
0.8.4-1
0.8.4-2~bpo10+1
0.8.4-2
0.8.5-1
0.8.5-2~bpo10+1
0.8.5-2
0.8.5-3~bpo10+1
0.8.5-3
0.8.6-1~bpo10+1
0.8.6-1

2.*

2.0.0-1~exp1
2.0.1-1~exp1
2.0.1-1
2.0.1-2
2.0.1-3
2.0.2-1~bpo10+1
2.0.2-1
2.0.3-1~bpo10+1
2.0.3-1
2.0.3-2
2.0.3-3
2.0.3-4
2.0.3-5
2.0.3-6
2.0.3-7
2.0.3-8~bpo10+1
2.0.3-8
2.0.3-9~bpo10+1
2.0.3-9
2.0.6-1~bpo10+1
2.0.6-1~bpo11+1
2.0.6-1
2.0.6-2
2.0.7-1~bpo10+1
2.1.1-1
2.1.1-2
2.1.1-3
2.1.2-1~bpo11+1
2.1.2-1
2.1.4-1~bpo11+1
2.1.4-1
2.1.5-1~bpo11+1
2.1.5-1
2.1.6-1
2.1.6-2
2.1.6-3~bpo11+1
2.1.6-3
2.1.7-1~bpo11+1
2.1.7-1
2.1.7-2
2.1.8-1
2.1.9-1~bpo11+1
2.1.9-1
2.1.9-2
2.1.9-3~bpo11+1
2.1.9-3
2.1.9-4
2.1.11-1~bpo11+1
2.1.11-1
2.1.12-1
2.1.12-2~bpo12+1
2.1.12-2
2.1.13-1~bpo11+1
2.1.13-1~bpo12+1
2.1.13-1
2.1.13-2~bpo11+1
2.1.13-2~bpo12+1
2.1.13-2
2.1.14-1~bpo11+1
2.1.14-1~bpo12+1
2.1.14-1
2.2.0-1~exp1
2.2.1-1~exp1
2.2.1-1~exp2
2.2.2-1~exp1

Ecosystem specific

{
    "urgency": "not yet assigned"
}