fisy-fuzz

FIle SYstem - FUZZer Este é o framework completo de fuzzing de sistema de arquivos que apresentei na conferência Hack in the Box 2020 Lockdown Edition em Abril. Palestra da Conferência Vídeo Único da Palestra Material da Conferência Objetivo O objetivo deste framework é descobrir bugs de seguranç...

CVE-2026-49429

The ZFSIOCUSERSPACEMANY ioctl, used by zfs-userspace8, truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size as the buffer limit when writing records. A local user with the "userused" delegated ZFS permission can trigger a kernel he...

EUVD-2026-62241

The ZFSIOCSETPROP ioctl, used by zfs-set8, incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv8 stream. Any local user can set the internal ZFS metadata flag "$hasrecvd" on...

CVE-2026-49431

The ZFS_IOC_SET_PROP ioctl in FreeBSD's OpenZFS component incorrectly validated the calling user, allowing any local user to set the internal "$hasrecvd" metadata flag on datasets, falsely indicating they received properties from a zfs-recv(8) stream. The BDU assessment classifies this as an acce...

EUVD-2026-62240

The ZFSIOCRECVNEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-bit size as the length for a byteswap operation. A local user with the "receive" delegated ZFS permission can trigger kernel memory corruption...

CVE-2026-49430

In the ZFS_IOC_RECV_NEW heal path, OpenZFS truncates a 64-bit payload size to 32-bit for allocation but uses the original 64-bit size as the byteswap length, causing a heap overflow exploitable by any local user with the "receive" delegated permission. Fixed in FreeBSD 14.3/14.4/15.0/15.1 release...

CVE-2026-49429 Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl

The ZFSIOCUSERSPACEMANY ioctl, used by zfs-userspace8, truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size as the buffer limit when writing records. A local user with the "userused" delegated ZFS permission can trigger a kernel he...

CVE-2026-49429

A kernel heap overflow in the OpenZFS component of FreeBSD affects the ZFS_IOC_USERSPACE_MANY ioctl used by zfs-userspace(8). The root cause is a 64-bit to 32-bit truncation : the output buffer size is truncated to 32 bits for kernel allocation, but the original 64-bit value is used as the write ...

EUVD-2026-62239

The ZFSIOCUSERSPACEMANY ioctl, used by zfs-userspace8, truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size as the buffer limit when writing records. A local user with the "userused" delegated ZFS permission can trigger a kernel he...

CVE-2026-49429 Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl

The ZFSIOCUSERSPACEMANY ioctl, used by zfs-userspace8, truncated a 64-bit output buffer size to a 32-bit integer for the kernel allocation, but used the original 64-bit size as the buffer limit when writing records. A local user with the "userused" delegated ZFS permission can trigger a kernel he...

FreeBSD-SA-26:40.zfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:40.zfs Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenZFS Category: contrib Module: openzfs Announced: 2026-06-30 Credits:...

Exploit for CVE-2026-45250

FreeBSD setcred2 — research artifacts This subdirectory col...

CVE-2026-21930

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Filesystems. The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes ...

EUVD-2026-3579

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Filesystems. The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes ...

CVE-2026-21930

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Filesystems. The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes ...

Oracle ZFS Storage Appliance Kit security vulnerabilities

The Oracle ZFS Storage Appliance Kit is a storage device from the American company Oracle, which supports flash-based, PB-level file storage and includes an embedded Oracle database. Version 8.8 of the Oracle ZFS Storage Appliance Kit contains a security vulnerability. This vulnerability allows...

CVE-2019-2878

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is 8.8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

PT-2025-51802

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description A remote code execution issue exists in the IPv6 autoconfiguration handler in FreeBSD. The issue is present in the rtsold background process and the rtsol utility. An attacker can achieve...

CVE-2025-62479

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Block Storage. The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit...

CVE-2025-62475

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Core. The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful...