CVE-2006-5873 Buffer overflow in the cluster_process_heartbeat function in cluster.c in layer 2 tunneling protocol network server (l2tpns) before 2.1.21 allows remote attackers to cause a denial of service via a la...
HighCVSS 7.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the cluster_process_heartbeat function in cluster.c in layer 2 tunneling protocol network server (l2tpns) before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| l2tpns | = 1.1 | No fix listed |
| l2tpns | = 2.0.13 | No fix listed |
| l2tpns | = 2.1 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| debian/l2tpns(Debian:12) | < 2.1.21-1 | 2.1.21-1 |
| debian/l2tpns(Debian:13) | < 2.1.21-1 | 2.1.21-1 |
| debian/l2tpns(Debian:14) | < 2.1.21-1 | 2.1.21-1 |
References
- l2tpns.cvs.sourceforge.net patch
- 23230 patch third-party-advisory vendor-advisory
- 23333 patch third-party-advisory vendor-advisory
- sourceforge.net vendor-advisory
- DSA-1230 patch vendor-advisory
- 21443 vdb-entry vendor-advisory
- ADV-2006-4860 vdb-entry
- l2tpns-heartbeat-dos(30732) vdb-entry
- Debian Security Tracker CVE-2006-5873 vendor-advisory
- bugs.debian.org issue-tracking