Lucene search

K
cve[email protected]CVE-2005-2134
HistoryOct 03, 2022 - 4:22 p.m.

CVE-2005-2134

2022-10-0316:22:47
web.nvd.nist.gov
20
netbsd
drivers
local users
kernel crash
audio device
ioctl
denial of service
cve-2005-2134

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

The (1) clcs and (2) emuxki drivers in NetBSD 1.6 through 2.0.2 allow local users to cause a denial of service (kernel crash) by using the set-parameters ioctl on an audio device to change the block size and set the pause state to “unpaused” in the same ioctl, which causes a divide-by-zero error.

Affected configurations

NVD
Node
netbsdnetbsdMatch1.6
OR
netbsdnetbsdMatch1.6.1
OR
netbsdnetbsdMatch1.6.2
OR
netbsdnetbsdMatch2.0
OR
netbsdnetbsdMatch2.0.1
OR
netbsdnetbsdMatch2.0.2

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2005-2134