p PatchFirst

CVE-2006-3121

CVE-2006-3121

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service (crash) via the length parameter in a heartbeat message.

EPSS 13.6% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • heartbeat Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.2.4-14

    Update to 1.2.4-14

  • heartbeat Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.2.4-14

    Update to 1.2.4-14

  • heartbeat Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.2.4-14

    Update to 1.2.4-14

Original sources

Check your server →