First published: Mon Feb 08 2010(Updated: )
Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial of service (kernel panic) via a negative mixer index number being passed to (1) the azalia_query_devinfo function in the azalia audio driver (src/sys/dev/pci/azalia.c) or (2) the hdaudio_afg_query_devinfo function in the hdaudio audio driver (src/sys/dev/pci/hdaudio/hdaudio_afg.c).
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
NetBSD current | =4.0 | |
NetBSD current | =5.0 | |
=4.0 | ||
=5.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-0561 is classified as a moderate severity vulnerability due to its potential to cause a denial of service.
To fix CVE-2010-0561, you should upgrade to the latest version of NetBSD that addresses this vulnerability, specifically versions after January 21, 2010.
CVE-2010-0561 affects NetBSD versions 4.0 and 5.0, as well as current versions before January 21, 2010.
CVE-2010-0561 is an integer signedness error vulnerability found in the azalia audio driver.
While CVE-2010-0561 primarily leads to a denial of service, it does not directly lead to unauthorized access or data breaches.