CVE-2006-4303 : Race condition in (1) libnsl and (2) TLI/XTI API routines in Sun Solaris 10 allows remote attackers to cause a denial of

Race condition in (1) libnsl and (2) TLI/XTI API routines in Sun Solaris 10 allows remote attackers to cause a denial of service ("tight loop" and CPU consumption for listener applications) via unknown vectors related to TCP fusion (do_tcp_fusion).

Published 2006-08-23 01:04:00

Updated 2017-07-20 01:33:00

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Exploit prediction scoring system (EPSS) score for CVE-2006-4303

EPSS FAQ

3.33%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 90 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-4303

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
2.6	LOW	AV:N/AC:H/Au:N/C:N/I:N/A:P	4.9	2.9	NIST
Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

Products affected by CVE-2006-4303

SUN » Solaris » Version: 10.0 Sparc Edition
cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2006-4303

Exploit prediction scoring system (EPSS) score for CVE-2006-4303

CVSS scores for CVE-2006-4303

References for CVE-2006-4303

Products affected by CVE-2006-4303