OpenZFS records

4 published records for vendor openzfs.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2013-20001No exploit	An issue was discovered in OpenZFS through 2.0.3.openzfs · openzfs Pre-auth	High7.5	—	2.0%	Feb 12, 2021
31Monitor	CVE-2020-24716No exploit	OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories.openzfs · openzfs · CWE-863 Broken access control (IDOR)	High7.8	—	0.4%	Aug 27, 2020
31Monitor	CVE-2020-24717No exploit	OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equiopenzfs · openzfs · CWE-276	High7.8	—	0.4%	Aug 27, 2020
30Monitor	CVE-2023-49298No exploit	OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file daopenzfs · openzfs · CWE-639 Pre-auth Broken access control (IDOR)	High7.5	—	1.1%	Nov 24, 2023

CVE-2013-20001
31Monitor
An issue was discovered in OpenZFS through 2.0.3.
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
openzfs · openzfsFeb 12, 2021
CVE-2020-24716
31Monitor
OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories.
HighCVSS 7.8No exploitEPSS 0%
- Broken access control (IDOR)
openzfs · openzfsAug 27, 2020
CVE-2020-24717
31Monitor
OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equi
HighCVSS 7.8No exploitEPSS 0%
openzfs · openzfsAug 27, 2020
CVE-2023-49298
30Monitor
OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file da
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
openzfs · openzfsNov 24, 2023