PT-2010-2318 · Netbsd · Netbsd

Pierre Pronchery · Publicado 2010-02-08 · Atualizado 2010-02-09 · CVE-2010-0561

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions NetBSD versions 4.0 through 5.0 NetBSD-current before 2010-01-21

Description The issue allows local users to cause a denial of service, resulting in a kernel panic. This is achieved by passing a negative mixer index number to either the azalia query devinfo function in the azalia audio driver or the hdaudio afg query devinfo function in the hdaudio audio driver.

Recommendations For NetBSD versions 4.0 through 5.0, consider updating to a version released after 2010-01-21 to resolve the issue. For NetBSD-current before 2010-01-21, update to a version released after 2010-01-21 to resolve the issue. As a temporary workaround, consider restricting access to the azalia query devinfo function and the hdaudio afg query devinfo function to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2010-0561

Produtos afetados

Netbsd

Referências · 7

• http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2010-003.txt.asc · Aviso do Fabricante
• http://securityfocus.com/bid/38057 · Nota
• http://osvdb.org/62082 · Nota
• http://secunia.com/advisories/38284 · Aviso do Fabricante
• http://securitytracker.com/id?1023539 · Nota
• http://osvdb.org/62081 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0561 · Nota de Segurança