NetBSD has acknowledged some vulnerabilities in the azalia(4) and hdaudio(4) drivers, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerabilities are caused due to an array indexing error within the "azalia_query_devinfo()" function in src/sys/dev/pci/azalia.c and the "hdaudio_afg_query_devinfo()" function in src/sys/dev/pci/hdaudio/hdaudio_afg.c, which can be exploited to e.g. cause a kernel crash.

Successful exploitation requires that at least one azalia(4) or hdaudio(4) device is available and configured.

Solution
Fixed in the CVS repository. See vendor's advisory for details.

Provided and/or discovered by
The vendor credits Pierre Pronchery.

Changelog
Further details available in Customer Area

Original Advisory
NetBSD-SA2010-003:
http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2010-003.txt.asc

Deep Links
Links available in Customer Area