Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-3121
HistoryAug 17, 2006 - 12:00 a.m.

CVE-2006-3121

2006-08-1700:00:00
ubuntu.com
ubuntu.com
6

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.062 Low

EPSS

Percentile

93.6%

The peel_netstring function in cl_netstring.c in the heartbeat subsystem in
High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote
attackers to cause a denial of service (crash) via the length parameter in
a heartbeat message.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchheartbeat< 1.2.4-2ubuntu0.2UNKNOWN
ubuntu6.10noarchheartbeat< 1.2.4-14build1UNKNOWN
ubuntu7.04noarchheartbeat< 1.2.4-14build1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.062 Low

EPSS

Percentile

93.6%