Published: 17/08/2006 Updated: 20/07/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux prior to 1.2.5, and 2.0 prior to 2.0.7, allows remote malicious users to cause a denial of service (crash) via the length parameter in a heartbeat message.

Vulnerable Product	Search on Vulmon	Subscribe to Product
high availability linux project heartbeat 2.0.2
high availability linux project heartbeat 2.0.3
high availability linux project heartbeat 2.0.4
high availability linux project heartbeat 2.0.5
high availability linux project heartbeat 2.0.6
high availability linux project heartbeat 1.2.3
high availability linux project heartbeat 1.2.4
high availability linux project heartbeat 2.0.1

Yan Rong Ge discovered that heartbeat did not sufficiently verify some packet input data, which could lead to an out-of-boundary memory access A remote attacker could exploit this to crash the daemon (Denial of Service) ...

source: wwwsecurityfocuscom/bid/19516/info Linux-HA Heartbeat is prone to a remote denial-of-service vulnerability By successfully exploiting this issue, attackers can crash the master control process This may result in the failure of services that depend on the application's functionality perl -e 'print "###\n2147483647heart attack: ...

CWE-399 http://www.linux-ha.org/SecurityIssues http://www.linux-ha.org/_cache/SecurityIssues__sec03.txt http://www.debian.org/security/2006/dsa-1151 http://www.securityfocus.com/bid/19516 http://www.ubuntu.com/usn/usn-335-1 http://secunia.com/advisories/21505 http://secunia.com/advisories/21511 http://secunia.com/advisories/21518 http://secunia.com/advisories/21521 http://security.gentoo.org/glsa/glsa-200608-23.xml http://secunia.com/advisories/21629 http://www.mandriva.com/security/advisories?name=MDKSA-2006:142 http://www.vupen.com/english/advisories/2006/3288 https://exchange.xforce.ibmcloud.com/vulnerabilities/28396 https://usn.ubuntu.com/335-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/28386/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-3121

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect