CVE:CVE-2020-11650
CNNVD:CNNVD-202004-540
iXsystems FreeNAS是美国iXsystems公司的一套开源的存储操作系统。
iXsystems FreeNAS和TrueNAS 11.2-u8之前的11.2版本和11.3-U1之前的11.3版本中存在授权问题漏洞。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade ixsystems freenas_firmware to a higher version than 11.2,11.2:u1,11.2:u2,11.2:u2.1,11.2:u3,11.2:u4,11.2:u4.1,11.2:u5,11.2:u5.1,11.2:u6,11.2:u6.1,11.2:u7,11.3,11.3:alpha1,11.3:alpha2,11.3:beta1,11.3:rc1,11.3:rc2,and avoid the version 11.2,11.2:u1,11.2:u2,11.2:u2.1,11.2:u3,11.2:u4,11.2:u4.1,11.2:u5,11.2:u5.1,11.2:u6,11.2:u6.1,11.2:u7,11.3,11.3:alpha1,11.3:alpha2,11.3:beta1,11.3:rc1,11.3:rc2; Upgrade ixsystems truenas_firmware to a higher version than 11.2,11.2:u1,11.2:u2,11.2:u2.1,11.2:u3,11.2:u4,11.2:u4.1,11.2:u5,11.2:u5.1,11.2:u6,11.2:u6.1,11.2:u7,11.3,11.3:alpha1,11.3:alpha2,11.3:beta1,11.3:rc1,11.3:rc2,and avoid the version 11.2,11.2:u1,11.2:u2,11.2:u2.1,11.2:u3,11.2:u4,11.2:u4.1,11.2:u5,11.2:u5.1,11.2:u6,11.2:u6.1,11.2:u7,11.3,11.3:alpha1,11.3:alpha2,11.3:beta1,11.3:rc1,11.3:rc2