CVE-2006-2413

MEDIUM 5.0CVE-2006-2413 · Published 16/05/2006 · updated 16/06/2026

In short

CVE-2006-2413 is a MEDIUM (CVSS 5.0) vulnerability affecting gnunet (gnunet).
Chance of exploitation in the next 30 days (EPSS): 5.2%, higher than 92.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gnunet gnunet	`= 0.7.0= 0.7.0a= 0.7.0b= 0.7.0c≤ 0.7.0d`	No fix yet

Description

GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an empty UDP datagram, possibly involving FIONREAD errors.

References

aluigi.altervista.org/adv/gnunetzero-adv.txt · Vendor Advisory
secunia.com/advisories/20096 · Patch
securityreason.com/securityalert/907
securityfocus.com/archive/1/433933/100/0/threaded
securityfocus.com/bid/17980
vupen.com/english/advisories/2006/1799
exchange.xforce.ibmcloud.com/vulnerabilities/26527
gnunet.org/svn/GNUnet/ChangeLog

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free