CVE-2006-3121

The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service (crash) via the length parameter in a heartbeat message.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

13.35% chance of exploitation in the next 30 days, 96th percentile

Published

2006-08-17

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/28386

References

• CVE Record
• NVD entry

Related

• CVE-2006-3109
• CVE-2006-3124
• CVE-2006-3105
• CVE-2006-3142
• CVE-2006-3104
• CVE-2006-3143