NetBSD CLCS / EMUXKI Audio Driver Local Denial of Service Vulnerability
BID:14122
Info
NetBSD CLCS / EMUXKI Audio Driver Local Denial of Service Vulnerability
| Bugtraq ID: | 14122 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 30 2005 12:00AM |
| Updated: | Jun 30 2005 12:00AM |
| Credit: | Credited to Ignatios Souvatzis and Yamamoto Takashi. |
| Vulnerable: |
NetBSD NetBSD 2.0.2 NetBSD NetBSD 2.0.1 NetBSD NetBSD 2.0 NetBSD NetBSD 1.6.2 NetBSD NetBSD 1.6.1 NetBSD NetBSD 1.6 beta NetBSD NetBSD 1.6 |
| Not Vulnerable: | |
Discussion
NetBSD CLCS / EMUXKI Audio Driver Local Denial of Service Vulnerability
NetBSD has reported a local denial of service condition due to a kernel-level bug in the clcs and emuxki audio drivers. NetBSD versions 1.6 to 2.0.2 are affected.
Local users with access to the audio device can cause a kernel failure on systems with specific hardware. The devices associated with the drivers are:
CS4280/4281, SB Live, or SB PC 512
This is a vulnerability on multi-user systems where local users have access to the audio device. In anticipation of systems where users do not, multimedia applications may be installed with setuid permissions. These may provide channels of attack if they themselves have vulnerabilities of their own.
NetBSD has reported a local denial of service condition due to a kernel-level bug in the clcs and emuxki audio drivers. NetBSD versions 1.6 to 2.0.2 are affected.
Local users with access to the audio device can cause a kernel failure on systems with specific hardware. The devices associated with the drivers are:
CS4280/4281, SB Live, or SB PC 512
This is a vulnerability on multi-user systems where local users have access to the audio device. In anticipation of systems where users do not, multimedia applications may be installed with setuid permissions. These may provide channels of attack if they themselves have vulnerabilities of their own.
Exploit / POC
NetBSD CLCS / EMUXKI Audio Driver Local Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
NetBSD CLCS / EMUXKI Audio Driver Local Denial of Service Vulnerability
Solution:
NetBSD has updated this in its current kernel. Users are advised to either obtain and compile the newest kernel for their architecture, or apply the patch to the audio.c file from CVS. From NetBSD advisory 2005-02:
The fix for this issue is contained in one file, sys/dev/audio.c
The following table lists the fixed revisions and
dates of this file for each branch:
CVS branch revision date
------------- ----------- ----------------
HEAD 1.196 2005/06/11
netbsd-3 1.192.4.2 2005/06/11
netbsd-2-0 1.182.2.2 2005/06/12
netbsd-2 1.182.2.1.2.2 2005/06/12
netbsd-1-6 1.155.4.7 2005/06/17
The following instructions describe how to upgrade your kernel
binaries by updating your source tree and rebuilding and installing a
new version of the kernel. In these instructions, replace:
BRANCH with the appropriate CVS branch (from the above table)
ARCH with your architecture (from uname -m), and
KERNCONF with the name of your kernel configuration file.
To update from CVS, re-build, and re-install the kernel:
# cd src
# cvs update -d -P -r BRANCH sys/dev/audio.c
# cd sys/arch/ARCH/conf
# config KERNCONF
# cd ../compile/KERNCONF
# make depend;make; make install
# reboot
Solution:
NetBSD has updated this in its current kernel. Users are advised to either obtain and compile the newest kernel for their architecture, or apply the patch to the audio.c file from CVS. From NetBSD advisory 2005-02:
The fix for this issue is contained in one file, sys/dev/audio.c
The following table lists the fixed revisions and
dates of this file for each branch:
CVS branch revision date
------------- ----------- ----------------
HEAD 1.196 2005/06/11
netbsd-3 1.192.4.2 2005/06/11
netbsd-2-0 1.182.2.2 2005/06/12
netbsd-2 1.182.2.1.2.2 2005/06/12
netbsd-1-6 1.155.4.7 2005/06/17
The following instructions describe how to upgrade your kernel
binaries by updating your source tree and rebuilding and installing a
new version of the kernel. In these instructions, replace:
BRANCH with the appropriate CVS branch (from the above table)
ARCH with your architecture (from uname -m), and
KERNCONF with the name of your kernel configuration file.
To update from CVS, re-build, and re-install the kernel:
# cd src
# cvs update -d -P -r BRANCH sys/dev/audio.c
# cd sys/arch/ARCH/conf
# config KERNCONF
# cd ../compile/KERNCONF
# make depend;make; make install
# reboot
References
NetBSD CLCS / EMUXKI Audio Driver Local Denial of Service Vulnerability
References:
References: