CVE-2006-4117: Medium severity Sun Solaris vulnerability

Published Aug 14, 2006

Updated

The squeuedrain function in Sun Solaris 10, possibly only when run on CMT processors, allows remote attackers to cause a denial of service ("bad trap" and system panic) by opening and closing a large number of TCP connections ("heavy TCP/IP loads"). NOTE: the original report specifies the function name as "drainsqueue," but this is likely incorrect.

Affected Software

1 affected component

Sun Solaris=10.0

Event History

Aug 14, 2006

CVE Published

09:04 PM

Aug 15, 2006

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-4117?

CVE-2006-4117 has a high severity rating due to its potential to cause a denial of service.

How do I fix CVE-2006-4117?

To mitigate CVE-2006-4117, it is recommended to apply the latest patches for Sun Solaris 10.

What types of systems are affected by CVE-2006-4117?

CVE-2006-4117 affects Sun Solaris 10 running on CMT processors.

Can CVE-2006-4117 be exploited remotely?

Yes, CVE-2006-4117 can be exploited remotely by generating heavy TCP/IP loads.

What impact does CVE-2006-4117 have on system stability?

CVE-2006-4117 can lead to system instability, causing 'bad trap' errors and system panics.