CVE-2024-20959

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
CVSS

No CVSS.

References
Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*

History

03 Jun 2025, 19:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 4.4
v2 : unknown
v3 : unknown

20 Jan 2024, 18:31

Type Values Removed Values Added
CWE NVD-CWE-noinfo
First Time Oracle zfs Storage Appliance Kit
Oracle
References () https://www.oracle.com/security-alerts/cpujan2024.html - () https://www.oracle.com/security-alerts/cpujan2024.html - Patch, Vendor Advisory
CPE cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*

16 Jan 2024, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-16 22:15

Updated : 2025-06-03 19:15


NVD link : CVE-2024-20959

Mitre link : CVE-2024-20959


JSON object : View

Products Affected

oracle

  • zfs_storage_appliance_kit