← Back

CVE-2013-6832

nvd nist
Published: Nov 21, 2013Modified: Apr 29, 2026

JSON object

Loading...
4.9
Vector
AV:L/AC:L/Au:N/C:C/I:N/A:N
Exploitability: 3.9 / Impact: 6.9
Source: NVD

Description

The nand_ioctl function in sys/dev/nand/nand_geom.c in the nand driver in the kernel in FreeBSD 10 and earlier does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.

Affected (73)

Products: Freebsd: Freebsd
Freebsd
1 product
Freebsd
Configuration A
73 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Freebsd
Up to 10.0
Freebsd
Version 0.4_1
Freebsd
Version 1.0
Freebsd
Version 1.1.5.1
Freebsd
Version 1.1.5
Freebsd
Version 1.1
Freebsd
Version 1.2
Freebsd
Version 1.5
Freebsd
Version 2.0.1
Freebsd
Version 2.0.5
Freebsd
Version 2.0
Freebsd
Version 2.1.0
Freebsd
Version 2.1.5
Freebsd
Version 2.1.6.1
Freebsd
Version 2.1.6
Freebsd
Version 2.1.7.1
Freebsd
Version 2.1.7
Freebsd
Version 2.1
Freebsd
Version 2.2.1
Freebsd
Version 2.2.2
Freebsd
Version 2.2.3
Freebsd
Version 2.2.4
Freebsd
Version 2.2.5
Freebsd
Version 2.2.6
Freebsd
Version 2.2.7
Freebsd
Version 2.2.8
Freebsd
Version 2.2
Freebsd
Version 3.0
Freebsd
Version 3.1
Freebsd
Version 3.2
Freebsd
Version 3.3
Freebsd
Version 3.4
Freebsd
Version 3.5.1
Freebsd
Version 3.5
Freebsd
Version 4.0
Freebsd
Version 4.1.1
Freebsd
Version 4.10
Freebsd
Version 4.11
Freebsd
Version 4.1
Freebsd
Version 4.2
Freebsd
Version 4.3
Freebsd
Version 4.4
Freebsd
Version 4.5
Freebsd
Version 4.6.2
Freebsd
Version 4.6
Freebsd
Version 4.7
Freebsd
Version 4.8
Freebsd
Version 4.9
Freebsd
Version 5.0
Freebsd
Version 5.1
Freebsd
Version 5.2.1
Freebsd
Version 5.2
Freebsd
Version 5.3
Freebsd
Version 5.4
Freebsd
Version 5.5
Freebsd
Version 6.0
Freebsd
Version 6.1
Freebsd
Version 6.2
Freebsd
Version 6.3
Freebsd
Version 6.4
Freebsd
Version 7.0
Freebsd
Version 7.1
Freebsd
Version 7.2
Freebsd
Version 7.3
Freebsd
Version 7.4
Freebsd
Version 8.0
Freebsd
Version 8.1
Freebsd
Version 8.2
Freebsd
Version 8.3
Freebsd
Version 8.4
Freebsd
Version 9.0
Freebsd
Version 9.1
Freebsd
Version 9.2

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: cve@mitre.org
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch

Timeline

No history available yet.