Design/Logic Flaw

2013-11-2104:40:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The qls_eioctl function in sys/dev/qlxge/qls_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.

CPENameOperatorVersion
freebsdeq5.2.1
freebsdeq7.4
freebsdeq6.1
freebsdeq3.1
freebsdeq6.4
freebsdeq6.3
freebsdeq2.2.5
freebsdeq5.5
freebsdeq8.2
freebsdeq5.4