CVE-2006-0226

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-01-19 · updated 2026-06-16

Description

Integer overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcasting crafted (1) beacon or (2) probe response frames.

Affected products

FreeBSD: 6.0-release, 6.0-stable

References

http://kernelwars.blogspot.com/2007/01/alive.html
http://secunia.com/advisories/18353
http://securitytracker.com/id?1015518
http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson
http://www.osvdb.org/22537
http://www.securityfocus.com/bid/16296
http://www.signedness.org/advisories/sps-0x1.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/24192
http://kernelwars.blogspot.com/2007/01/alive.html
http://secunia.com/advisories/18353

Get alerted when CVE-2006-0226 or the next vulnerability affects your stack