CVE-2006-3745

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-23 · updated 2026-06-16

Description

Unspecified vulnerability in the sctp_make_abort_user function in the SCTP implementation in Linux 2.6.x before 2.6.17.10 and 2.4.23 up to 2.4.33 allows local users to cause a denial of service (panic) and possibly gain root privileges via unknown attack vectors.

Affected products

Linux kernel: through 2.6.17.9; 2.4.23, 2.4.24, 2.4.25, 2.4.26, 2.4.27, 2.4.28 (+91)

References

http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0600.html
http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.2
http://secunia.com/advisories/21576
http://secunia.com/advisories/21605
http://secunia.com/advisories/21614
http://secunia.com/advisories/21695
http://secunia.com/advisories/21847
http://secunia.com/advisories/21934
http://secunia.com/advisories/22082
http://secunia.com/advisories/22093
http://secunia.com/advisories/22148
http://secunia.com/advisories/22174

Get alerted when CVE-2006-3745 or the next vulnerability affects your stack