CVE-2010-0561

Name: CVE-2010-0561
Creator: NVD / NIST
Published: 2010-02-08T21:30:00.453+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.34%

Last modified Jun 16, 2026

CVE-2010-0561 is a vulnerability of currently unknown severity. Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial of service (kernel panic) via a negative mixer index number being passed to (1) the azalia_query_devinfo function in the azalia audio driver (src/sys/dev/pci/azalia.c) or (2) the hdaudio_afg_query_devinfo function in the hdaudio audio driver (src/sys/dev/pci/hdaudio/hdaudio_afg.c).. EPSS estimates a 0.34% chance of exploitation in the next 30 days.

Description

Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial of service (kernel panic) via a negative mixer index number being passed to (1) the azalia_query_devinfo function in the azalia audio driver (src/sys/dev/pci/azalia.c) or (2) the hdaudio_afg_query_devinfo function in the hdaudio audio driver (src/sys/dev/pci/hdaudio/hdaudio_afg.c).

Metrics

EPSS Probability

0.34%

25.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-189

Affected Software

Vendor	Product	Versions
Netbsd	Netbsd	4.0
Netbsd	Netbsd	5.0

References

Timeline

Published: Feb 8, 2010
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2010-0561?

How severe is CVE-2010-0561?

Severity scoring for CVE-2010-0561 is pending analysis. The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.

How do I fix CVE-2010-0561?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2010-0561?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST