CVE-2010-0561 - Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users

CVE-2010-0561

Summary

Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial of service (kernel panic) via a negative mixer index number being passed to (1) the azalia_query_devinfo function in the azalia audio driver (src/sys/dev/pci/azalia.c) or (2) the hdaudio_afg_query_devinfo function in the hdaudio audio driver (src/sys/dev/pci/hdaudio/hdaudio_afg.c).

References

Vulnerable Configurations

cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*
cpe:2.3:o:netbsd:netbsd:4.0:*:*:*:*:*:*:*
cpe:2.3:o:netbsd:netbsd:5.0:*:*:*:*:*:*:*
cpe:2.3:o:netbsd:netbsd:5.0:*:*:*:*:*:*:*

CVSS

Base:	4.9 (as of 09-02-2010 - 05:00)
Impact:
Exploitability:

CWE

CWE-189

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:N/I:N/A:C

refmap via4

bid	38057
netbsd	NetBSD-SA2010-003
osvdb	62081 62082
sectrack	1023539
secunia	38284

Last major update

09-02-2010 - 05:00

Published

08-02-2010 - 21:30

Last modified

09-02-2010 - 05:00