Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial of service (kernel panic) via a negative mixer index number being passed to (1) the azalia_query_devinfo function in the azalia audio driver (src/sys/dev/pci/azalia.c) or (2) the hdaudio_afg_query_devinfo function in the hdaudio audio driver (src/sys/dev/pci/hdaudio/hdaudio_afg.c).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NetBSD azalia和hdaudio驱动本地拒绝服务漏洞
Vulnerability Description
NetBSD是一款免费开放源代码的UNIX性质的操作系统。 NetBSD的src/sys/dev/pci/azalia.c文件中的azalia_query_devinfo()函数和src/sys/dev/pci/hdaudio/hdaudio_afg.c文件中的hdaudio_afg_query_devinfo()函数错误的假设mixer索引为无符整形,因此没有检查负值。由于mixer索引号是由用户指定的,任何能够访问混音器的用户都可以通过指定负值来访问负数的数组索引,导致内核忙碌。 如果要利用这个漏洞,
CVSS Information
N/A
Vulnerability Type
N/A