CVE-2006-6654
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.8%
The sendmsg function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029, when run on a 64-bit architecture, allows attackers to cause a denial of service (kernel panic) via an invalid msg_controllen parameter to the sendit function.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| netbsd:netbsd | netbsd | eq | 2.0 |
| netbsd:netbsd | netbsd | eq | 2.1 |
| netbsd:netbsd | netbsd | eq | 3.0 |
| netbsd:netbsd | netbsd | eq | 3.0.1 |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.8%