PT-2013-6141
CVE-2013-6832
·
تاريخ النشر
2013-11-21
·
تاريخ التحديث
2013-11-25
الوصف من
CVSS 2.0
4.9
متوسطةالمقاييسAV:L/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
FreeBSD versions prior to 11
Description
The issue is related to the nand ioctl function in the nand driver, which does not properly initialize a certain data structure. This allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
Recommendations
For versions prior to 11, update to a version that includes the fix for the nand ioctl function issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾