The (1) clcs and (2) emuxki drivers in NetBSD 1.6 through 2.0.2 allow local users to cause a denial of service (kernel crash) by using the set-parameters ioctl on an audio device to change the block size and set the pause state to unpaused in the same ioctl, which causes a divide-by-zero error.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netbsd | Netbsd | 1.6 (including) | 1.6 (including) |
| Netbsd | Netbsd | 1.6.1 (including) | 1.6.1 (including) |
| Netbsd | Netbsd | 1.6.2 (including) | 1.6.2 (including) |
| Netbsd | Netbsd | 2.0 (including) | 2.0 (including) |
| Netbsd | Netbsd | 2.0.1 (including) | 2.0.1 (including) |
| Netbsd | Netbsd | 2.0.2 (including) | 2.0.2 (including) |