CVE-2013-6833

Published Nov 21, 2013 CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Description
The qls_eioctl function in sys/dev/qlxge/qls_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2013-6635 The qls_eioctl function in sys/dev/qlxge/qls_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 5:46 PM
Reserved
Nov 20, 2013, 12:00 AM
Status
Modified
Published
Nov 21, 2013, 4:40 AM
Modified
Jun 17, 2026, 12:01 AM