CVE-2011-2480
- State
- Published
- Severity
- Not scored
- Published
- Nov 27, 2019
- Updated
- Aug 6, 2024
- Reserved
- Jun 15, 2011
Description
Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures. A signedness error in the IEEE80211_IOC_CHANINFO ioctl allows a local unprivileged user to cause the kernel to copy large amounts of kernel memory back to the user, disclosing potentially sensitive information.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
FreeBSDFreeBSD, NetBSD |
|
NetBSDFreeBSD, NetBSD |
|
References
- https://security-tracker.debian.org/tracker/CVE-2011-2480
- https://access.redhat.com/security/cve/cve-2011-2480
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631161
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631160
- [oss-security] 20110620 Re: CVE request: FreeBSD/NetBSD 802.11 kernel memory disclosuremailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.