CVE-2006-3745: linux linux_kernel

Modified

Published 23-08-2006Last modified 07-08-2024

Vulnerability summary

CVE-2006-3745 is a high (CVSS 7.2) vulnerability in linux linux_kernel. EPSS estimates a 0.44% chance of exploitation in the next 30 days, higher than 37.9% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 7.2, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

7.2/10

010

High · v2.0 (NVD)

EPSS score

0.44%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3

DSA-1183-1 DSA-1184-2 RHSA-2006:0617

Timeline

23-08-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in the sctp_make_abort_user function in the SCTP implementation in Linux 2.6.x before 2.6.17.10 and 2.4.23 up to 2.4.33 allows local users to cause a denial of service (panic) and possibly gain root privileges via unknown attack vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.07.2

EPSS trend

Probability

0.44%

Chance of exploitation in the next 30 days

Percentile

38%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.44% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Linux1 product

linux_kernel≤ 2.6.17.9 | 2.4.23 | 2.4.24 | 2.4.25 | 2.4.26 | 2.4.27 | 2.4.28 | 2.4.29 | 2.4.30 | 2.4.31 | 2.4.32 | 2.4.33 | 2.6.0 | 2.6.1 | 2.6.10 | 2.6.11 | 2.6.11.1 | 2.6.11.2 | 2.6.11.3 | 2.6.11.4 | 2.6.11.5 | 2.6.11.6 | 2.6.11.7 | 2.6.11.8 | 2.6.11.9 | 2.6.11.10 | 2.6.11.11 | 2.6.11.12 | 2.6.12 | 2.6.12.1 | 2.6.12.2 | 2.6.12.3 | 2.6.12.4 | 2.6.12.5 | 2.6.12.6 | 2.6.13 | 2.6.13.1 | 2.6.13.2 | 2.6.13.3 | 2.6.13.4 | 2.6.13.5 | 2.6.14 | 2.6.14.1 | 2.6.14.2 | 2.6.14.3 | 2.6.14.4 | 2.6.14.5 | 2.6.14.6 | 2.6.14.7 | 2.6.15 | 2.6.15.1 | 2.6.15.2 | 2.6.15.3 | 2.6.15.4 | 2.6.15.5 | 2.6.15.6 | 2.6.15.7 | 2.6.16 | 2.6.16.1 | 2.6.16.2 | 2.6.16.3 | 2.6.16.4 | 2.6.16.5 | 2.6.16.6 | 2.6.16.7 | 2.6.16.8 | 2.6.16.9 | 2.6.16.10 | 2.6.16.11 | 2.6.16.12 | 2.6.16.13 | 2.6.16.14 | 2.6.16.15 | 2.6.16.16 | 2.6.16.17 | 2.6.16.18 | 2.6.16.19 | 2.6.16.20 | 2.6.16.21 | 2.6.16.22 | 2.6.16.23 | 2.6.16.24 | 2.6.16.25 | 2.6.16.26 | 2.6.16.27 | 2.6.16.28 | 2.6.16.29 | 2.6.16.30 | 2.6.16.31 | 2.6.17 | 2.6.17.1 | 2.6.17.2 | 2.6.17.3 | 2.6.17.4 | 2.6.17.5 | 2.6.17.6 | 2.6.17.7 | 2.6.17.8

1 vendor · 1 product

References

30 links

exchange.xforce.ibmcloud.com/vulnerabilities/28530VDB EntryX Refsource XF
secunia.com/advisories/21934Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:025Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/21847Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2006-0617.htmlVendor AdvisoryX Refsource REDHATPatch
secunia.com/advisories/21695Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21605Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.debian.org/security/2006/dsa-1183Vendor AdvisoryX Refsource DEBIAN
www.mandriva.com/security/advisories?name=MDKSA-2006:150Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/bid/19666VDB EntryX Refsource BID

Show all 30 references

www.mandriva.com/security/advisories?name=MDKSA-2006:151Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/22082Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/21614Third Party AdvisoryX Refsource SECUNIAVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10706VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/22174Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/444066/100/0/threadedMailing ListX Refsource BUGTRAQ
archives.neohapsis.com/archives/fulldisclosure/2006-08/0600.htmlMailing ListX Refsource FULLDISC
secunia.com/advisories/21576Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/22148Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/usn-346-1Vendor AdvisoryX Refsource UBUNTU
www.novell.com/linux/security/advisories/2006_21_sr.htmlVendor AdvisoryX Refsource SUSE
www.novell.com/linux/security/advisories/2006_22_sr.htmlVendor AdvisoryX Refsource SUSE
support.avaya.com/elmodocs2/security/ASA-2006-203.htmX Refsource CONFIRM
issues.rpath.com/browse/RPL-611X Refsource CONFIRM
www.vupen.com/english/advisories/2006/3358VDB EntryX Refsource VUPENVendor Advisory
www.securityfocus.com/archive/1/444887/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/22093Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2006/dsa-1184Vendor AdvisoryX Refsource DEBIAN
kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.2X Refsource CONFIRM
www.novell.com/linux/security/advisories/2006_57_kernel.htmlVendor AdvisoryX Refsource SUSE