#1059322 zfs-linux: CVE-2013-20001

Package:
src:zfs-linux
Source:
src:zfs-linux
Submitter:
Moritz Mühlenhoff
Date:
2024-11-03 18:03:02 UTC
Severity:
normal
Tags:
#1059322#5
Date:
2023-12-22 13:59:15 UTC
From:
To:
Hi,

The following vulnerability was published for zfs-linux.

CVE-2013-20001[0]:
| An issue was discovered in OpenZFS through 2.0.3. When an NFS share
| is exported to IPv6 addresses via the sharenfs feature, there is a
| silent failure to parse the IPv6 address data, and access is allowed
| to everyone. IPv6 restrictions from the configuration are not
| applied.

https://github.com/openzfs/zfs/commit/6cb5e1e7591da20af3a15793e022345a73e40fb7 (zfs-2.2.0-rc1)

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2013-20001
https://www.cve.org/CVERecord?id=CVE-2013-20001

Please adjust the affected versions in the BTS as needed.

#1059322#18
Date:
2023-12-22 20:05:04 UTC
From:
To:
tags 1059254 + upstream
found 1059254 1.2.25+ds1-2
tags 1059256 + upstream
found 1059256 0.11.3+repack-6
tags 1059257 + upstream
found 1059257 0.6.4+ds-1
tags 1059261 + upstream
tags 1059265 + upstream
found 1059265 0.5.3+git20230121-2
forwarded 1059265 https://github.com/tats/w3m/issues/268
tags 1059275 + upstream
found 1059275 1.0.13-1
tags 1059277 + upstream
found 1059277 3.1.1+dfsg-9
forwarded 1059277 https://github.com/openbabel/openbabel/issues/2650
tags 1059278 + upstream
found 1059278 255-1
forwarded 1059278 https://github.com/systemd/systemd/issues/25676
tags 1059279 + upstream
tags 1059280 + upstream
tags 1059281 + upstream
tags 1059282 + upstream
forwarded 1059282 https://github.com/agl/jbig2enc/issues/61
tags 1059284 + upstream
forwarded 1059284 https://github.com/agl/jbig2enc/issues/84
tags 1059285 + upstream
forwarded 1059285 https://github.com/agl/jbig2enc/issues/85
tags 1059286 + upstream
tags 1059287 + upstream
found 1059287 1.7.16-2
forwarded 1059287 https://github.com/DaveGamble/cJSON/issues/802 https://github.com/DaveGamble/cJSON/issues/803
tags 1059288 + upstream
tags 1059290 + upstream
forwarded 1059290 https://github.com/Castaglia/proftpd-mod_proxy/issues/257
found 1059290 0.9.2-1
tags 1059292 + upstream
forwarded 1059292 https://gitlab.com/m2crypto/m2crypto/-/issues/342
found 1059292 0.38.0-4.1
tags 1059293 + upstream
forwarded 1059293 https://github.com/ckolivas/lrzip/issues/246
tags 1059294 + upstream
tags 1059296 + upstream
tags 1059297 + upstream
tags 1059298 + upstream
forwarded 1059298 https://github.com/python/cpython/issues/102988
tags 1059299 + upstream
forwarded 1059299 https://github.com/python/cpython/issues/102988
tags 1059300 + upstream
tags 1059301 + upstream
tags 1059302 + upstream
forwarded 1059302 https://codereview.qt-project.org/c/qt/qtbase/+/455027
tags 1059303 + upstream
tags 1059304 + upstream
forwarded 1059304 https://github.com/mathjax/MathJax/issues/3074
tags 1059305 + upstream
forwarded 1059305 https://github.com/rust-lang/cargo/pull/12291
tags 1059306 + upstream
forwarded 1059306 https://github.com/rust-lang/cargo/pull/12291
tags 1059307 + upstream
tags 1059308 + upstream
forwarded 1059308 https://github.com/openssl/openssl/pull/13817
found 1059308 38.0.4-3
found 1059308 38.0.4-4
tags 1059309 + upstream
tags 1059310 + upstream
forwarded 1059310 https://github.com/weidai11/cryptopp/issues/1247
tags 1059311 + upstream
forwarded 1059311 https://github.com/weidai11/cryptopp/issues/1248
tags 1059312 + upstream
forwarded 1059312 https://github.com/weidai11/cryptopp/issues/1249
tags 1059313 + upstream
tags 1059315 + upstream
tags 1059316 + upstream
tags 1059317 + upstream
tags 1059318 + upstream
tags 1059319 + upstream
tags 1059320 + upstream
tags 1059322 + upstream
found 1059322 2.1.14-1
close 1059322 2.2.0-1~exp1
thanks