Back to feed
EUVD-2013-6634 · Published Nov 21, 2013
The nand_ioctl function in sys/dev/nand/nand_geom.c in the nand driver in the kernel in FreeBSD 10 and earlier does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
Technologies
Freebsd Freebsd
Weaknesses
CWE-200
CVSS scores
- v2.04.9
AV:L/AC:L/Au:N/C:C/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
