The audio_write function in NetBSD 3.0 allows local users to cause a denial of service (kernel crash) by using the audiosetinfo ioctl to change the sample rate of an audio device.Referenceshttp://www.securityfocus.com/bid/17999http://www.osvdb.org/25086ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-014.txt.aschttp://securitytracker.com/id?1016004
