VULNERABILITY INTELLIGENCE

CVE-2006-6654

CVSS score4.3 MEDIUM
EPSS probability0.89%
CISA KEVNot currently listed
Published2006-12-20
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P

Description

The sendmsg function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029, when run on a 64-bit architecture, allows attackers to cause a denial of service (kernel panic) via an invalid msg_controllen parameter to the sendit function.

Primary references