CVE-2006-3202: Medium severity NetBSD NetBSD vulnerability
The ip6savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapped sockets are being used before processing IPv6 socket options, which allows local users to cause a denial of service (crash) by creating an IPv4-mapped IPv6 socket with the SOTIMESTAMP socket option set, then sending an IPv4 packet through the socket.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3202?
CVE-2006-3202 is classified as a denial of service vulnerability, which can crash the system.
How do I fix CVE-2006-3202?
To fix CVE-2006-3202, upgrade to a version of NetBSD that is not affected, such as versions above 3.0.
Who is affected by CVE-2006-3202?
CVE-2006-3202 affects local users running NetBSD versions 2.0 to 3.0 with specific configurations.
What causes CVE-2006-3202?
CVE-2006-3202 is caused by the ip6_savecontrol function failing to check for IPv4-mapped sockets before processing IPv6 socket options.
Can CVE-2006-3202 be exploited remotely?
CVE-2006-3202 cannot be exploited remotely as it requires local user access to trigger the denial of service.