← Back

CVE-2006-6653

nvd nist
Published: Dec 20, 2006Modified: Apr 23, 2026

JSON object

Loading...
1.7
Vector
AV:L/AC:L/Au:S/C:N/I:N/A:P
Exploitability: 3.1 / Impact: 2.9
Source: NVD

Description

The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (socket consumption) via an invalid (1) name or (2) namelen parameter, which may result in the socket never being closed (aka "a dangling socket").

Affected (4)

Products: Netbsd: Netbsd
Netbsd
1 product
Netbsd
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Netbsd
Netbsd
Version 2.0
Netbsd
Version 3.0.1
Netbsd
Version 3.0
Netbsd
Version current

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-026.txt.asc (unsafe URL)
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Patch
ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-026.txt.asc (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.