CVE-2011-2480

2019-11-2718:53:37

redhat

www.cve.org

0.002 Low

EPSS

Percentile

55.9%

JSON

Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures. A signedness error in the IEEE80211_IOC_CHANINFO ioctl allows a local unprivileged user to cause the kernel to copy large amounts of kernel memory back to the user, disclosing potentially sensitive information.

CNA Affected

[
  {
    "product": "FreeBSD",
    "vendor": "FreeBSD, NetBSD",
    "versions": [
      {
        "status": "affected",
        "version": "before 8.2"
      }
    ]
  },
  {
    "product": "NetBSD",
    "vendor": "FreeBSD, NetBSD",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]