CVE-2013-6834: Freebsd

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The ql_eioctl function in sys/dev/qlxgbe/ql_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.

Affected products

• Freebsd Freebsd: up to and including 10.0; version 0.4_1 only; version 1.0 only; version 1.1 only; version 1.1.5 only; version 1.1.5.1 only; …

Published 2013-11-21. Last modified 2026-06-17.