Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
10 vulnerabilities by OpenZFS
CVE-2026-79619 (GCVE-0-2026-79619)
Vulnerability from nvd – Published: 2026-08-26 12:50 – Updated: 2026-08-27 17:32
VLAI
EPSS
VEX
Title
OpenZFS: user-namespace capability check allows unprivileged local authorization bypass
Summary
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrative operations (eg create, import, destroy), pool event log access (zpool events) and fault injection (zinject). Exploiting the problem requires only that the local user is permitted to open /dev/zfs (governed by local device permissions) and that the kernel permits unprivileged user namespace creation. No prior access to the target pool or its underlying devices is needed.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 15:47 UTC
CWE
- CWE-863 - Incorrect Authorization
Assigner
References
6 references
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-79619",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T15:47:13.454769Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T15:47:19.764Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "OpenZFS",
"repo": "https://github.com/openzfs/zfs",
"vendor": "OpenZFS",
"versions": [
{
"lessThan": "2.2.11",
"status": "affected",
"version": "0.7.0",
"versionType": "semver"
},
{
"lessThan": "2.3.9",
"status": "affected",
"version": "2.3.0",
"versionType": "semver"
},
{
"lessThan": "2.4.4",
"status": "affected",
"version": "2.4.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Erica Windisch"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Rob Norris"
}
],
"descriptions": [
{
"lang": "en",
"value": "On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrative operations (eg create, import, destroy), pool event log access (zpool events) and fault injection (zinject). Exploiting the problem requires only that the local user is permitted to open /dev/zfs (governed by local device permissions) and that the kernel permits unprivileged user namespace creation. No prior access to the target pool or its underlying devices is needed."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "CWE-863 Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T17:32:03.057Z",
"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
"shortName": "canonical"
},
"references": [
{
"tags": [
"patch"
],
"url": "https://github.com/openzfs/zfs/pull/18959"
},
{
"tags": [
"vendor-advisory"
],
"url": "https://github.com/advisories/GHSA-mhf5-q8gw-qg9v"
},
{
"tags": [
"product"
],
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.4.4"
},
{
"tags": [
"product"
],
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.3.9"
},
{
"tags": [
"product"
],
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.2.11"
},
{
"tags": [
"mailing-list"
],
"url": "https://seclists.org/fulldisclosure/2026/Aug/40"
}
],
"title": "OpenZFS: user-namespace capability check allows unprivileged local authorization bypass",
"x_generator": {
"engine": "cvelib 1.8.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
"assignerShortName": "canonical",
"cveId": "CVE-2026-79619",
"datePublished": "2026-08-26T12:50:10.502Z",
"dateReserved": "2026-08-25T08:10:52.983Z",
"dateUpdated": "2026-08-27T17:32:03.057Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2023-49298 (GCVE-0-2023-49298)
Vulnerability from nvd – Published: 2023-11-24 00:00 – Updated: 2025-11-03 19:28
VLAI
EPSS
VEX
Summary
OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but can be security related in realistic situations. A possible example is cp, from a recent GNU Core Utilities (coreutils) version, when attempting to preserve a rule set for denying unauthorized access. (One might use cp when configuring access control, such as with the /etc/hosts.deny file specified in the IBM Support reference.) NOTE: this issue occurs less often in version 2.2.1, and in versions before 2.1.4, because of the default configuration in those versions.
Severity
7.5 (High)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-10-10 20:36 UTC
CWE
- n/a
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
12 references
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2025-11-03T19:28:35.343Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/pull/15571"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/issues/15526"
},
{
"tags": [
"x_transferred"
],
"url": "https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=275308"
},
{
"tags": [
"x_transferred"
],
"url": "https://news.ycombinator.com/item?id=38405731"
},
{
"tags": [
"x_transferred"
],
"url": "https://web.archive.org/web/20231124172959/https://www.ibm.com/support/pages/how-remove-missing%C2%A0newline%C2%A0or%C2%A0line%C2%A0too%C2%A0long-error-etchostsallow%C2%A0and%C2%A0etchostsdeny-files"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.2.2"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.1.14"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.theregister.com/2023/12/04/two_new_versions_of_openzfs/"
},
{
"tags": [
"x_transferred"
],
"url": "https://bugs.gentoo.org/917224"
},
{
"tags": [
"x_transferred"
],
"url": "https://news.ycombinator.com/item?id=38770168"
},
{
"name": "[debian-lts-announce] 20240318 [SECURITY] [DLA 3766-1] zfs-linux security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00019.html"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00009.html"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:openzfs:openzfs:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "openzfs",
"vendor": "openzfs",
"versions": [
{
"lessThanOrEqual": "2.1.13",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "2.2.1",
"status": "affected",
"version": "2.2.0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-49298",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-10T20:36:55.286724Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639 Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-10T20:38:26.767Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but can be security related in realistic situations. A possible example is cp, from a recent GNU Core Utilities (coreutils) version, when attempting to preserve a rule set for denying unauthorized access. (One might use cp when configuring access control, such as with the /etc/hosts.deny file specified in the IBM Support reference.) NOTE: this issue occurs less often in version 2.2.1, and in versions before 2.1.4, because of the default configuration in those versions."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-18T22:06:01.490Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://github.com/openzfs/zfs/pull/15571"
},
{
"url": "https://github.com/openzfs/zfs/issues/15526"
},
{
"url": "https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=275308"
},
{
"url": "https://news.ycombinator.com/item?id=38405731"
},
{
"url": "https://web.archive.org/web/20231124172959/https://www.ibm.com/support/pages/how-remove-missing%C2%A0newline%C2%A0or%C2%A0line%C2%A0too%C2%A0long-error-etchostsallow%C2%A0and%C2%A0etchostsdeny-files"
},
{
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.2.2"
},
{
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.1.14"
},
{
"url": "https://www.theregister.com/2023/12/04/two_new_versions_of_openzfs/"
},
{
"url": "https://bugs.gentoo.org/917224"
},
{
"url": "https://news.ycombinator.com/item?id=38770168"
},
{
"name": "[debian-lts-announce] 20240318 [SECURITY] [DLA 3766-1] zfs-linux security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00019.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2023-49298",
"datePublished": "2023-11-24T00:00:00.000Z",
"dateReserved": "2023-11-24T00:00:00.000Z",
"dateUpdated": "2025-11-03T19:28:35.343Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2013-20001 (GCVE-0-2013-20001)
Vulnerability from nvd – Published: 2021-02-12 00:00 – Updated: 2025-11-03 19:25
VLAI
EPSS
VEX
Summary
An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2025-11-03T19:25:13.751Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/issues/1894#issuecomment-30693652"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/releases"
},
{
"name": "[debian-lts-announce] 20240318 [SECURITY] [DLA 3766-1] zfs-linux security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00019.html"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00009.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-18T22:06:03.072Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://github.com/openzfs/zfs/issues/1894#issuecomment-30693652"
},
{
"url": "https://github.com/openzfs/zfs/releases"
},
{
"name": "[debian-lts-announce] 20240318 [SECURITY] [DLA 3766-1] zfs-linux security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00019.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2013-20001",
"datePublished": "2021-02-12T00:00:00.000Z",
"dateReserved": "2021-02-12T00:00:00.000Z",
"dateUpdated": "2025-11-03T19:25:13.751Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2020-24716 (GCVE-0-2020-24716)
Vulnerability from nvd – Published: 2020-08-27 18:03 – Updated: 2024-08-04 15:19
VLAI
EPSS
VEX
Summary
OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://jira.ixsystems.com/browse/NAS-107270 | x_refsource_MISC |
| https://github.com/openzfs/zfs/commit/716b53d0a14… | x_refsource_MISC |
| https://reviews.freebsd.org/D26107 | x_refsource_MISC |
| https://github.com/openzfs/zfs/compare/zfs-0.8.4.… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T15:19:09.340Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jira.ixsystems.com/browse/NAS-107270"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://reviews.freebsd.org/D26107"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-08-27T18:03:32.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jira.ixsystems.com/browse/NAS-107270"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://reviews.freebsd.org/D26107"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-24716",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jira.ixsystems.com/browse/NAS-107270",
"refsource": "MISC",
"url": "https://jira.ixsystems.com/browse/NAS-107270"
},
{
"name": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f",
"refsource": "MISC",
"url": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f"
},
{
"name": "https://reviews.freebsd.org/D26107",
"refsource": "MISC",
"url": "https://reviews.freebsd.org/D26107"
},
{
"name": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1",
"refsource": "MISC",
"url": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-24716",
"datePublished": "2020-08-27T18:03:32.000Z",
"dateReserved": "2020-08-27T00:00:00.000Z",
"dateUpdated": "2024-08-04T15:19:09.340Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-24717 (GCVE-0-2020-24717)
Vulnerability from nvd – Published: 2020-08-27 18:03 – Updated: 2024-08-04 15:19
VLAI
EPSS
VEX
Summary
OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://jira.ixsystems.com/browse/NAS-107270 | x_refsource_MISC |
| https://github.com/openzfs/zfs/commit/716b53d0a14… | x_refsource_MISC |
| https://reviews.freebsd.org/D26107 | x_refsource_MISC |
| https://github.com/openzfs/zfs/compare/zfs-0.8.4.… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T15:19:09.332Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jira.ixsystems.com/browse/NAS-107270"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://reviews.freebsd.org/D26107"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-08-27T18:03:21.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jira.ixsystems.com/browse/NAS-107270"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://reviews.freebsd.org/D26107"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-24717",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jira.ixsystems.com/browse/NAS-107270",
"refsource": "MISC",
"url": "https://jira.ixsystems.com/browse/NAS-107270"
},
{
"name": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f",
"refsource": "MISC",
"url": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f"
},
{
"name": "https://reviews.freebsd.org/D26107",
"refsource": "MISC",
"url": "https://reviews.freebsd.org/D26107"
},
{
"name": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1",
"refsource": "MISC",
"url": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-24717",
"datePublished": "2020-08-27T18:03:21.000Z",
"dateReserved": "2020-08-27T00:00:00.000Z",
"dateUpdated": "2024-08-04T15:19:09.332Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2026-79619 (GCVE-0-2026-79619)
Vulnerability from cvelistv5 – Published: 2026-08-26 12:50 – Updated: 2026-08-27 17:32
VLAI
EPSS
VEX
Title
OpenZFS: user-namespace capability check allows unprivileged local authorization bypass
Summary
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrative operations (eg create, import, destroy), pool event log access (zpool events) and fault injection (zinject). Exploiting the problem requires only that the local user is permitted to open /dev/zfs (governed by local device permissions) and that the kernel permits unprivileged user namespace creation. No prior access to the target pool or its underlying devices is needed.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 15:47 UTC
CWE
- CWE-863 - Incorrect Authorization
Assigner
References
6 references
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-79619",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T15:47:13.454769Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T15:47:19.764Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "OpenZFS",
"repo": "https://github.com/openzfs/zfs",
"vendor": "OpenZFS",
"versions": [
{
"lessThan": "2.2.11",
"status": "affected",
"version": "0.7.0",
"versionType": "semver"
},
{
"lessThan": "2.3.9",
"status": "affected",
"version": "2.3.0",
"versionType": "semver"
},
{
"lessThan": "2.4.4",
"status": "affected",
"version": "2.4.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Erica Windisch"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Rob Norris"
}
],
"descriptions": [
{
"lang": "en",
"value": "On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected operations include pool-administrative operations (eg create, import, destroy), pool event log access (zpool events) and fault injection (zinject). Exploiting the problem requires only that the local user is permitted to open /dev/zfs (governed by local device permissions) and that the kernel permits unprivileged user namespace creation. No prior access to the target pool or its underlying devices is needed."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "CWE-863 Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T17:32:03.057Z",
"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
"shortName": "canonical"
},
"references": [
{
"tags": [
"patch"
],
"url": "https://github.com/openzfs/zfs/pull/18959"
},
{
"tags": [
"vendor-advisory"
],
"url": "https://github.com/advisories/GHSA-mhf5-q8gw-qg9v"
},
{
"tags": [
"product"
],
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.4.4"
},
{
"tags": [
"product"
],
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.3.9"
},
{
"tags": [
"product"
],
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.2.11"
},
{
"tags": [
"mailing-list"
],
"url": "https://seclists.org/fulldisclosure/2026/Aug/40"
}
],
"title": "OpenZFS: user-namespace capability check allows unprivileged local authorization bypass",
"x_generator": {
"engine": "cvelib 1.8.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
"assignerShortName": "canonical",
"cveId": "CVE-2026-79619",
"datePublished": "2026-08-26T12:50:10.502Z",
"dateReserved": "2026-08-25T08:10:52.983Z",
"dateUpdated": "2026-08-27T17:32:03.057Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2023-49298 (GCVE-0-2023-49298)
Vulnerability from cvelistv5 – Published: 2023-11-24 00:00 – Updated: 2025-11-03 19:28
VLAI
EPSS
VEX
Summary
OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but can be security related in realistic situations. A possible example is cp, from a recent GNU Core Utilities (coreutils) version, when attempting to preserve a rule set for denying unauthorized access. (One might use cp when configuring access control, such as with the /etc/hosts.deny file specified in the IBM Support reference.) NOTE: this issue occurs less often in version 2.2.1, and in versions before 2.1.4, because of the default configuration in those versions.
Severity
7.5 (High)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-10-10 20:36 UTC
CWE
- n/a
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
12 references
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2025-11-03T19:28:35.343Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/pull/15571"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/issues/15526"
},
{
"tags": [
"x_transferred"
],
"url": "https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=275308"
},
{
"tags": [
"x_transferred"
],
"url": "https://news.ycombinator.com/item?id=38405731"
},
{
"tags": [
"x_transferred"
],
"url": "https://web.archive.org/web/20231124172959/https://www.ibm.com/support/pages/how-remove-missing%C2%A0newline%C2%A0or%C2%A0line%C2%A0too%C2%A0long-error-etchostsallow%C2%A0and%C2%A0etchostsdeny-files"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.2.2"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.1.14"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.theregister.com/2023/12/04/two_new_versions_of_openzfs/"
},
{
"tags": [
"x_transferred"
],
"url": "https://bugs.gentoo.org/917224"
},
{
"tags": [
"x_transferred"
],
"url": "https://news.ycombinator.com/item?id=38770168"
},
{
"name": "[debian-lts-announce] 20240318 [SECURITY] [DLA 3766-1] zfs-linux security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00019.html"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00009.html"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:openzfs:openzfs:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "openzfs",
"vendor": "openzfs",
"versions": [
{
"lessThanOrEqual": "2.1.13",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "2.2.1",
"status": "affected",
"version": "2.2.0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-49298",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-10T20:36:55.286724Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639 Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-10T20:38:26.767Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but can be security related in realistic situations. A possible example is cp, from a recent GNU Core Utilities (coreutils) version, when attempting to preserve a rule set for denying unauthorized access. (One might use cp when configuring access control, such as with the /etc/hosts.deny file specified in the IBM Support reference.) NOTE: this issue occurs less often in version 2.2.1, and in versions before 2.1.4, because of the default configuration in those versions."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-18T22:06:01.490Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://github.com/openzfs/zfs/pull/15571"
},
{
"url": "https://github.com/openzfs/zfs/issues/15526"
},
{
"url": "https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=275308"
},
{
"url": "https://news.ycombinator.com/item?id=38405731"
},
{
"url": "https://web.archive.org/web/20231124172959/https://www.ibm.com/support/pages/how-remove-missing%C2%A0newline%C2%A0or%C2%A0line%C2%A0too%C2%A0long-error-etchostsallow%C2%A0and%C2%A0etchostsdeny-files"
},
{
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.2.2"
},
{
"url": "https://github.com/openzfs/zfs/releases/tag/zfs-2.1.14"
},
{
"url": "https://www.theregister.com/2023/12/04/two_new_versions_of_openzfs/"
},
{
"url": "https://bugs.gentoo.org/917224"
},
{
"url": "https://news.ycombinator.com/item?id=38770168"
},
{
"name": "[debian-lts-announce] 20240318 [SECURITY] [DLA 3766-1] zfs-linux security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00019.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2023-49298",
"datePublished": "2023-11-24T00:00:00.000Z",
"dateReserved": "2023-11-24T00:00:00.000Z",
"dateUpdated": "2025-11-03T19:28:35.343Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2013-20001 (GCVE-0-2013-20001)
Vulnerability from cvelistv5 – Published: 2021-02-12 00:00 – Updated: 2025-11-03 19:25
VLAI
EPSS
VEX
Summary
An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2025-11-03T19:25:13.751Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/issues/1894#issuecomment-30693652"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/releases"
},
{
"name": "[debian-lts-announce] 20240318 [SECURITY] [DLA 3766-1] zfs-linux security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00019.html"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00009.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-18T22:06:03.072Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://github.com/openzfs/zfs/issues/1894#issuecomment-30693652"
},
{
"url": "https://github.com/openzfs/zfs/releases"
},
{
"name": "[debian-lts-announce] 20240318 [SECURITY] [DLA 3766-1] zfs-linux security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00019.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2013-20001",
"datePublished": "2021-02-12T00:00:00.000Z",
"dateReserved": "2021-02-12T00:00:00.000Z",
"dateUpdated": "2025-11-03T19:25:13.751Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2020-24716 (GCVE-0-2020-24716)
Vulnerability from cvelistv5 – Published: 2020-08-27 18:03 – Updated: 2024-08-04 15:19
VLAI
EPSS
VEX
Summary
OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://jira.ixsystems.com/browse/NAS-107270 | x_refsource_MISC |
| https://github.com/openzfs/zfs/commit/716b53d0a14… | x_refsource_MISC |
| https://reviews.freebsd.org/D26107 | x_refsource_MISC |
| https://github.com/openzfs/zfs/compare/zfs-0.8.4.… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T15:19:09.340Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jira.ixsystems.com/browse/NAS-107270"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://reviews.freebsd.org/D26107"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-08-27T18:03:32.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jira.ixsystems.com/browse/NAS-107270"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://reviews.freebsd.org/D26107"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-24716",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jira.ixsystems.com/browse/NAS-107270",
"refsource": "MISC",
"url": "https://jira.ixsystems.com/browse/NAS-107270"
},
{
"name": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f",
"refsource": "MISC",
"url": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f"
},
{
"name": "https://reviews.freebsd.org/D26107",
"refsource": "MISC",
"url": "https://reviews.freebsd.org/D26107"
},
{
"name": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1",
"refsource": "MISC",
"url": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-24716",
"datePublished": "2020-08-27T18:03:32.000Z",
"dateReserved": "2020-08-27T00:00:00.000Z",
"dateUpdated": "2024-08-04T15:19:09.340Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-24717 (GCVE-0-2020-24717)
Vulnerability from cvelistv5 – Published: 2020-08-27 18:03 – Updated: 2024-08-04 15:19
VLAI
EPSS
VEX
Summary
OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://jira.ixsystems.com/browse/NAS-107270 | x_refsource_MISC |
| https://github.com/openzfs/zfs/commit/716b53d0a14… | x_refsource_MISC |
| https://reviews.freebsd.org/D26107 | x_refsource_MISC |
| https://github.com/openzfs/zfs/compare/zfs-0.8.4.… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T15:19:09.332Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jira.ixsystems.com/browse/NAS-107270"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://reviews.freebsd.org/D26107"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-08-27T18:03:21.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jira.ixsystems.com/browse/NAS-107270"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://reviews.freebsd.org/D26107"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-24717",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jira.ixsystems.com/browse/NAS-107270",
"refsource": "MISC",
"url": "https://jira.ixsystems.com/browse/NAS-107270"
},
{
"name": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f",
"refsource": "MISC",
"url": "https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f"
},
{
"name": "https://reviews.freebsd.org/D26107",
"refsource": "MISC",
"url": "https://reviews.freebsd.org/D26107"
},
{
"name": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1",
"refsource": "MISC",
"url": "https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-24717",
"datePublished": "2020-08-27T18:03:21.000Z",
"dateReserved": "2020-08-27T00:00:00.000Z",
"dateUpdated": "2024-08-04T15:19:09.332Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}