CVE-2011-2480 Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures. A signedness error in the IEEE80211_IOC_CHANINFO ioctl allo...
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures. A signedness error in the IEEE80211_IOC_CHANINFO ioctl allows a local unprivileged user to cause the kernel to copy large amounts of kernel memory back to the user, disclosing potentially sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freebsd | < 8.2 | 8.2 |
| netbsd | All versions | No fix listed |
| FreeBSD, NetBSD FreeBSD | = before 8.2 | No fix listed |
| FreeBSD, NetBSD NetBSD | All versions | No fix listed |
References
- access.redhat.com broken-link
- bugs.debian.org third-party-advisory
- bugs.debian.org third-party-advisory
- security-tracker.debian.org third-party-advisory
- [oss-security] 20110620 Re: CVE request: FreeBSD/NetBSD 802.11 kernel memory disclosure mailing-list third-party-advisory