PT-2013-6141

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11 Description The issue is related to the nand ioctl function in the nand driver, which does not properly initialize a certain data structure. This allows local users to obtain sensitive information from kernel memor...

CVE-2013-6832: Exposure of Sensitive Information to an Unauthorized Actor

The nandioctl function in sys/dev/nand/nandgeom.c in the nand driver in the kernel in FreeBSD 10 and earlier does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call...

FreeBSD 10 nand Driver IOCTL Kernel Memory Leak Bug

The nand driver in FreeBSD versions 10 and below has a vulnerability that leaks arbitrary kernel memory to the userspace. XADV-2013005 FreeBSD 10 site: http://www.x90c.org References: 1 http://www.unix.com/man-page/freebsd/9/malloc/ 2...