PT-2006-3180 · Netbsd · Netbsd

Publicado 2006-05-05 · Atualizado 2013-09-05 · CVE-2006-2205

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions NetBSD version 3.0

Description The issue allows local users to cause a denial of service, resulting in a kernel crash. This is achieved by using the audiosetinfo ioctl to change the sample rate of an audio device through the audio write function.

Recommendations For NetBSD version 3.0, consider restricting access to the audio write function to prevent unauthorized changes to the sample rate of audio devices until a fix is available.

Correção

Identificadores relacionados

CVE-2006-2205

Produtos afetados

Netbsd

Referências · 5

• http://securityfocus.com/bid/17999 · Nota
• http://securitytracker.com/id?1016004 · Correção
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-014.txt.asc · Correção, Aviso do Fabricante
• http://osvdb.org/25086 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2205 · Nota de Segurança