← back
CVE-2011-2480

CVE-2011-2480

EPSS 1.6%
Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures. A signedness error in the IEEE80211_IOC_CHANINFO ioctl allows a local unprivileged user to cause the kernel to copy large amounts of kernel memory back to the user, disclosing potentially sensitive information.
Affected products
FreeBSD, NetBSD · FreeBSDFreeBSD, NetBSD · NetBSD

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://access.redhat.com/security/cve/cve-2011-2480https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631160https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631161https://security-tracker.debian.org/tracker/CVE-2011-2480https://www.openwall.com/lists/oss-security/2011/06/20/15