CVE-2011-2480: Freebsd

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures. A signedness error in the IEEE80211_IOC_CHANINFO ioctl allows a local unprivileged user to cause the kernel to copy large amounts of kernel memory back to the user, disclosing potentially sensitive information.

Affected products

  • Freebsd Freebsd: before 8.2 (fixed in 8.2)
  • Netbsd Netbsd: affected versions not specified

Published 2019-11-27. Last modified 2026-06-16.