CVE-2020-24717

OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777...

CVE-2020-24716

OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories...

CVE-2020-24716

OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories...

Design/Logic Flaw

OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories...

Code injection

OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777...

CVE-2020-24716

OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories...

CVE-2020-24716

CVE-2020-24716 concerns OpenZFS prior to 2.0.0-rc1 when used on FreeBSD, where directories incorrectly expose execute permissions to all users. The connected Red Hat/NVD/OSV entries corroborate the same description: vulnerable component is OpenZFS; affected version range is before 2.0.0-rc1; plat...

CVE-2020-24717

CVE-2020-24717 affects OpenZFS prior to 2.0.0-rc1 when used on FreeBSD, where group permissions are misinterpreted as user permissions, making mode 0770 effectively as permissive as 0777. The Red Hat advisory and other listings confirm OpenZFS on FreeBSD as the affected context. The vulnerability...

CVE-2020-24717

OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777...

FreeBSD : sysutils/openzfs-kmod -- critical permissions issues (2ed7e8db-e234-11ea-9392-002590bc43be)

Andrew Walker reports : Issue 1 : Users are always granted permissions to cd into a directory. The check for whether execute is present on directories is a de-facto no-op. This cannot be mitigated without upgrading. Even setting an explicit 'deny - execute' NFSv4 ACE will be bypassed. Issue 2 : A...