CVE-2010-0561: Medium severity NetBSD NetBSD vulnerability
Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial of service (kernel panic) via a negative mixer index number being passed to (1) the azaliaquerydevinfo function in the azalia audio driver (src/sys/dev/pci/azalia.c) or (2) the hdaudioafgquerydevinfo function in the hdaudio audio driver (src/sys/dev/pci/hdaudio/hdaudioafg.c).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0561?
CVE-2010-0561 is classified as a moderate severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2010-0561?
To fix CVE-2010-0561, you should upgrade to the latest version of NetBSD that addresses this vulnerability, specifically versions after January 21, 2010.
What systems are affected by CVE-2010-0561?
CVE-2010-0561 affects NetBSD versions 4.0 and 5.0, as well as current versions before January 21, 2010.
What type of vulnerability is CVE-2010-0561?
CVE-2010-0561 is an integer signedness error vulnerability found in the azalia audio driver.
Can CVE-2010-0561 lead to a security breach?
While CVE-2010-0561 primarily leads to a denial of service, it does not directly lead to unauthorized access or data breaches.