CVE-2006-3815

2006-07-2513:22:00

Debian Security Bug Tracker

security-tracker.debian.org

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

0.4%

JSON

heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup.

OSVersionArchitecturePackageVersionFilename
Debian12allheartbeat< 1.2.4-13heartbeat_1.2.4-13_all.deb
Debian11allheartbeat< 1.2.4-13heartbeat_1.2.4-13_all.deb
Debian10allheartbeat< 1.2.4-13heartbeat_1.2.4-13_all.deb
Debian999allheartbeat< 1.2.4-13heartbeat_1.2.4-13_all.deb
Debian13allheartbeat< 1.2.4-13heartbeat_1.2.4-13_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	heartbeat	< 1.2.4-13	heartbeat_1.2.4-13_all.deb
Debian	11	all	heartbeat	< 1.2.4-13	heartbeat_1.2.4-13_all.deb
Debian	10	all	heartbeat	< 1.2.4-13	heartbeat_1.2.4-13_all.deb
Debian	999	all	heartbeat	< 1.2.4-13	heartbeat_1.2.4-13_all.deb
Debian	13	all	heartbeat	< 1.2.4-13	heartbeat_1.2.4-13_all.deb