Improper input validation in Netbsd

CVE-2006-6653

The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (socket consumption) via an invalid (1) name or (2) namelen parameter, which may result in the socket never being closed (aka "a dangling socket").

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (16.2th percentile) — read the EPSS interpretation.

Affected products

  • Netbsd — versions 2.0, 3.0, 3.0.1
  • N/a — versions n/a

Weakness classification (CWE)

References