CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-3121

The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service (crash) via the length parameter in a heartbeat message.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.21

EPSS Ranking 95.3%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2006-3121

High Availability Linux Project » Heartbeat » Version: 1.2.3

cpe:2.3:a:high_availability_linux_project:heartbeat:1.2.3
High Availability Linux Project » Heartbeat » Version: 1.2.4

cpe:2.3:a:high_availability_linux_project:heartbeat:1.2.4
High Availability Linux Project » Heartbeat » Version: 2.0.1

cpe:2.3:a:high_availability_linux_project:heartbeat:2.0.1
High Availability Linux Project » Heartbeat » Version: 2.0.2

cpe:2.3:a:high_availability_linux_project:heartbeat:2.0.2
High Availability Linux Project » Heartbeat » Version: 2.0.3

cpe:2.3:a:high_availability_linux_project:heartbeat:2.0.3
High Availability Linux Project » Heartbeat » Version: 2.0.4

cpe:2.3:a:high_availability_linux_project:heartbeat:2.0.4
High Availability Linux Project » Heartbeat » Version: 2.0.5

cpe:2.3:a:high_availability_linux_project:heartbeat:2.0.5
High Availability Linux Project » Heartbeat » Version: 2.0.6

cpe:2.3:a:high_availability_linux_project:heartbeat:2.0.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-3121

Products

Pricing

Contact Us