CVE-2006-4117

Severity: medium (CVSS 5.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-14 · updated 2026-06-16

Description

The squeue_drain function in Sun Solaris 10, possibly only when run on CMT processors, allows remote attackers to cause a denial of service ("bad trap" and system panic) by opening and closing a large number of TCP connections ("heavy TCP/IP loads"). NOTE: the original report specifies the function name as "drain_squeue," but this is likely incorrect.

Affected products

Sun Solaris: 10.0

References

http://secunia.com/advisories/21453
http://securitytracker.com/id?1016674
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102554-1
http://www.vupen.com/english/advisories/2006/3239
https://exchange.xforce.ibmcloud.com/vulnerabilities/28321
http://secunia.com/advisories/21453
http://securitytracker.com/id?1016674
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102554-1
http://www.vupen.com/english/advisories/2006/3239
https://exchange.xforce.ibmcloud.com/vulnerabilities/28321

Get alerted when CVE-2006-4117 or the next vulnerability affects your stack