CVE-2006-7254

MEDIUM

glibc < 2.5 - Denial of Service via Unclosed Client Sockets

Title source: llm

Description

The nscd daemon in the GNU C Library (glibc) before version 2.5 does not close incoming client sockets if they cannot be handled by the daemon, allowing local users to carry out a denial of service attack on the daemon.

References (1)

Core 1

Core References

Issue Tracking, Patch, Third Party Advisory x_refsource_misc

https://sourceware.org/bugzilla/show_bug.cgi?id=2498

Scores

CVSS v3 5.5

EPSS 0.0004

EPSS Percentile 13.0%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-19

Status published

Products (1)

gnu/glibc < 2.5

Published Apr 10, 2019

Tracked Since Feb 18, 2026