VULNERABILITY INTELLIGENCE

CVE-2006-6653

CVSS score1.7 LOW
EPSS probability0.26%
CISA KEVNot currently listed
Published2006-12-20
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:S/C:N/I:N/A:P

Description

The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (socket consumption) via an invalid (1) name or (2) namelen parameter, which may result in the socket never being closed (aka "a dangling socket").

Weakness classification

  • CWE-20: Improper Input Validation

Primary references