CVE catalog

CVE-2023-49298

zfs-linux: CVE-2023-49298

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.16% · Oct 25, 2026

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but can be security related in realistic situations. A possible example is cp, from a recent GNU Core Utilities (coreutils) version, when attempting to preserve a rule set for denying unauthorized access. (One might use cp when configuring access control, such as with the /etc/hosts.deny file specified in the IBM Support reference.) NOTE: this issue occurs less often in version 2.2.1, and in versions before 2.1.4, because of the default configuration in those versions.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianzfs-linuxsid2.4.4-1fixed
Debianzfs-linuxforky2.4.4-1fixed
Debianzfs-linuxtrixie2.3.9-0+deb13u1fixed
Debianzfs-linuxtrixie-security2.3.9-0+deb13u1fixed
Debianzfs-linuxbookworm2.1.11-1+deb12u1fixed
Alpinezfs3.192.2.1-r1fixed
Alpinezfs3.202.2.1-r1fixed
Alpinezfs3.212.2.1-r1fixed
Alpinezfs3.222.2.1-r1fixed
Alpinezfs3.232.2.1-r1fixed
Alpinezfs3.242.2.1-r1fixed
Alpinezfs-lts3.192.2.1-r1fixed
Alpinezfs-lts3.202.2.1-r1fixed
Alpinezfs-lts3.212.2.1-r1fixed
Alpinezfs-lts3.222.2.1-r1fixed
Alpinezfs-lts3.232.2.1-r1fixed
Alpinezfs-lts3.242.2.1-r1fixed
Alpinezfs-rpi3.192.2.1-r1fixed
Alpinezfs-rpi3.202.2.1-r1fixed
Alpinezfs-rpi3.212.2.1-r1fixed
Alpinezfs-rpi3.222.2.1-r1fixed
Alpinezfs-rpi3.232.2.1-r1fixed
Alpinezfs-rpi3.242.2.1-r1fixed
Ubuntuzfs-linux16.040.6.4.2-0ubuntu1vulnerable
Ubuntuzfs-linux16.040.6.5.3-0ubuntu2vulnerable
Ubuntuzfs-linux16.040.6.5.3-0ubuntu3vulnerable
Ubuntuzfs-linux16.040.6.5.3-0ubuntu4vulnerable
Ubuntuzfs-linux16.040.6.5.3-0ubuntu5vulnerable
Ubuntuzfs-linux16.040.6.5.3-0ubuntu6vulnerable
Ubuntuzfs-linux16.040.6.5.4-0ubuntu1vulnerable
Ubuntuzfs-linux16.040.6.5.4-0ubuntu2vulnerable
Ubuntuzfs-linux16.040.6.5.4-0ubuntu3vulnerable
Ubuntuzfs-linux16.040.6.5.4-0ubuntu4vulnerable
Ubuntuzfs-linux16.040.6.5.4-0ubuntu5vulnerable
Ubuntuzfs-linux16.040.6.5.4-0ubuntu6vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu5vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu6vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu7vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu8vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu9vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu10vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu12vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu13vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu14vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu15vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu16vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu17vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu18vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu19vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu20vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu21vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu23vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu24vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu25vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu26vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu27vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu28vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu29vulnerable
Ubuntuzfs-linux16.040.6.5.6-0ubuntu30vulnerable
Ubuntuzfs-linuxpro0.6.5.11-1ubuntu3vulnerable
Ubuntuzfs-linuxpro0.6.5.11-1ubuntu4vulnerable
Ubuntuzfs-linuxpro0.6.5.11-1ubuntu5vulnerable
Ubuntuzfs-linuxpro0.6.5.11-1ubuntu6vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu2vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu3vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu4vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu5vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu6vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu7vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu8vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu9vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu10vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu11vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu12vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu13vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu14vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu15vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu16vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu16.2vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu16.3vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu16.4vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu16.6vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu16.7vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu16.8vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu16.9vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu16.10vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu16.11vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu16.12vulnerable
Ubuntuzfs-linuxpro0.7.5-1ubuntu16.12+esm1vulnerable
Ubuntuzfs-linux20.040.8.1-1ubuntu14vulnerable
Ubuntuzfs-linux20.040.8.1-1ubuntu15vulnerable
Ubuntuzfs-linux20.040.8.1-1ubuntu16vulnerable
Ubuntuzfs-linux20.040.8.1-1ubuntu17vulnerable
Ubuntuzfs-linux20.040.8.2-3ubuntu1vulnerable
Ubuntuzfs-linux20.040.8.2-3ubuntu2vulnerable
Ubuntuzfs-linux20.040.8.2-3ubuntu3vulnerable
Ubuntuzfs-linux20.040.8.2-3ubuntu4vulnerable
Ubuntuzfs-linux20.040.8.2-3ubuntu5vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu2vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu3vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu4vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu5vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu6vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu7vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu8vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu9vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu10vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu11vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.1vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.2vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.3vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.4vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.5vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.6vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.7vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.8vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.9vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.10vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.11vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.12vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.13vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.14vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.15vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.16vulnerable
Ubuntuzfs-linux20.040.8.3-1ubuntu12.17fixed
Ubuntuzfs-linux22.042.0.6-1ubuntu2vulnerable
Ubuntuzfs-linux22.042.0.6-1ubuntu3vulnerable
Ubuntuzfs-linux22.042.1.2-1ubuntu1vulnerable
Ubuntuzfs-linux22.042.1.2-1ubuntu2vulnerable
Ubuntuzfs-linux22.042.1.2-1ubuntu3vulnerable
Ubuntuzfs-linux22.042.1.4-0ubuntu0.1vulnerable
Ubuntuzfs-linux22.042.1.5-1ubuntu6~22.04.1vulnerable
Ubuntuzfs-linux22.042.1.5-1ubuntu6~22.04.2vulnerable
Ubuntuzfs-linux22.042.1.5-1ubuntu6~22.04.3vulnerable
Ubuntuzfs-linux22.042.1.5-1ubuntu6~22.04.4fixed
Ubuntuzfs-linux24.042.2.0~rc3-0ubuntu4vulnerable
Ubuntuzfs-linux24.042.2.0-0ubuntu1vulnerable
Ubuntuzfs-linux24.042.2.0-0ubuntu3vulnerable
Ubuntuzfs-linux24.042.2.1-0ubuntu1vulnerable
Ubuntuzfs-linux24.042.2.2-0ubuntu1vulnerable
Ubuntuzfs-linux24.042.2.2-0ubuntu2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianzfs-linuxsourcesid2.1.14-1not yet assignedNot reported[1056752]
Debianzfs-linuxsourceforky2.1.14-1not yet assignedNot reported[1056752]
Debianzfs-linuxsourcetrixie2.1.14-1not yet assignedNot reported[1056752]
Debianzfs-linuxsourcebookworm2.1.11-1+deb12u1not yet assignedNot reported[1056752]
Alpinezfsapk3.192.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfsapk3.202.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfsapk3.212.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfsapk3.222.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfsapk3.232.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfsapk3.242.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfs-ltsapk3.192.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfs-ltsapk3.202.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfs-ltsapk3.212.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfs-ltsapk3.222.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfs-ltsapk3.232.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfs-ltsapk3.242.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfs-rpiapk3.192.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfs-rpiapk3.202.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfs-rpiapk3.212.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfs-rpiapk3.222.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfs-rpiapk3.232.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Alpinezfs-rpiapk3.242.2.1-r1Not reportedALPINE-CVE-2023-49298Not reported
Ubuntuzfs-linuxdeb20.040.8.3-1ubuntu12.17Not reportedUBUNTU-CVE-2023-49298Not reported
Ubuntuzfs-linuxdeb22.042.1.5-1ubuntu6~22.04.4Not reportedUBUNTU-CVE-2023-49298Not reported
Ubuntuzfs-linuxdeb24.042.2.2-0ubuntu2Not reportedUBUNTU-CVE-2023-49298Not reported

[Debian bug #1056752]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]