CVEvulnerability

CVE-2013-6832

4.9 MEDIUM Published 2013-11-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2013-11-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
CWE-200

Description

The nand_ioctl function in sys/dev/nand/nand_geom.c in the nand driver in the kernel in FreeBSD 10 and earlier does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.

Affected configurations

• freebsd freebsd (<= 10.0) • freebsd freebsd 0.4 1 • freebsd freebsd 1.0 • freebsd freebsd 1.1 • freebsd freebsd 1.1.5 • freebsd freebsd 1.1.5.1 • freebsd freebsd 1.2 • freebsd freebsd 1.5 • freebsd freebsd 2.0 • freebsd freebsd 2.0.1 • freebsd freebsd 2.0.5 • freebsd freebsd 2.1 • freebsd freebsd 2.1.0 • freebsd freebsd 2.1.5 • freebsd freebsd 2.1.6 • freebsd freebsd 2.1.6.1 • freebsd freebsd 2.1.7 • freebsd freebsd 2.1.7.1 • freebsd freebsd 2.2 • freebsd freebsd 2.2.1 • freebsd freebsd 2.2.2 • freebsd freebsd 2.2.3 • freebsd freebsd 2.2.4 • freebsd freebsd 2.2.5 • freebsd freebsd 2.2.6 • freebsd freebsd 2.2.7 • freebsd freebsd 2.2.8 • freebsd freebsd 3.0 • freebsd freebsd 3.1 • freebsd freebsd 3.2 • freebsd freebsd 3.3 • freebsd freebsd 3.4 • freebsd freebsd 3.5 • freebsd freebsd 3.5.1 • freebsd freebsd 4.0 • freebsd freebsd 4.1 • freebsd freebsd 4.1.1 • freebsd freebsd 4.2 • freebsd freebsd 4.3 • freebsd freebsd 4.4 • freebsd freebsd 4.5 • freebsd freebsd 4.6 • freebsd freebsd 4.6.2 • freebsd freebsd 4.7 • freebsd freebsd 4.8 • freebsd freebsd 4.9 • freebsd freebsd 4.10 • freebsd freebsd 4.11 • freebsd freebsd 5.0 • freebsd freebsd 5.1 • freebsd freebsd 5.2 • freebsd freebsd 5.2.1 • freebsd freebsd 5.3 • freebsd freebsd 5.4 • freebsd freebsd 5.5 • freebsd freebsd 6.0 • freebsd freebsd 6.1 • freebsd freebsd 6.2 • freebsd freebsd 6.3 • freebsd freebsd 6.4 … and 13 more

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References