CVE-2006-3745

Unspecified vulnerability in the sctp_make_abort_user function in the SCTP implementation in Linux 2.6.x before 2.6.17.10 and 2.4.23 up to 2.4.33 allows local users to cause a denial of service (panic) and possibly gain root privileges via unknown attack vectors.

• http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0600.html
• http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.2
• http://secunia.com/advisories/21576Vendor Advisory
• http://secunia.com/advisories/21605Patch, Vendor Advisory
• http://secunia.com/advisories/21614Vendor Advisory
• http://secunia.com/advisories/21695Vendor Advisory
• http://secunia.com/advisories/21847Vendor Advisory
• http://secunia.com/advisories/21934Vendor Advisory
• http://secunia.com/advisories/22082Vendor Advisory
• http://secunia.com/advisories/22093Vendor Advisory
• http://secunia.com/advisories/22148Vendor Advisory
• http://secunia.com/advisories/22174Vendor Advisory
• http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm
• http://www.debian.org/security/2006/dsa-1183
• http://www.debian.org/security/2006/dsa-1184
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:150
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:151
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:025
• http://www.novell.com/linux/security/advisories/2006_21_sr.html
• http://www.novell.com/linux/security/advisories/2006_22_sr.html
• http://www.novell.com/linux/security/advisories/2006_57_kernel.html
• http://www.redhat.com/support/errata/RHSA-2006-0617.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/444066/100/0/threaded
• http://www.securityfocus.com/archive/1/444887/100/0/threaded
• http://www.securityfocus.com/bid/19666
• http://www.ubuntu.com/usn/usn-346-1
• http://www.vupen.com/english/advisories/2006/3358Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28530
• https://issues.rpath.com/browse/RPL-611
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10706
• http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0600.html
• http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.2
• http://secunia.com/advisories/21576Vendor Advisory
• http://secunia.com/advisories/21605Patch, Vendor Advisory
• http://secunia.com/advisories/21614Vendor Advisory
• http://secunia.com/advisories/21695Vendor Advisory
• http://secunia.com/advisories/21847Vendor Advisory
• http://secunia.com/advisories/21934Vendor Advisory
• http://secunia.com/advisories/22082Vendor Advisory
• http://secunia.com/advisories/22093Vendor Advisory
• http://secunia.com/advisories/22148Vendor Advisory
• http://secunia.com/advisories/22174Vendor Advisory
• http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm
• http://www.debian.org/security/2006/dsa-1183
• http://www.debian.org/security/2006/dsa-1184
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:150
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:151
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:025
• http://www.novell.com/linux/security/advisories/2006_21_sr.html
• http://www.novell.com/linux/security/advisories/2006_22_sr.html
• http://www.novell.com/linux/security/advisories/2006_57_kernel.html
• http://www.redhat.com/support/errata/RHSA-2006-0617.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/444066/100/0/threaded
• http://www.securityfocus.com/archive/1/444887/100/0/threaded
• http://www.securityfocus.com/bid/19666
• http://www.ubuntu.com/usn/usn-346-1
• http://www.vupen.com/english/advisories/2006/3358Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28530
• https://issues.rpath.com/browse/RPL-611
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10706

Published

Aug 23, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3739Integer overflow in the CIDAFM function in X.Org 6.8.2 and X…
• CVE-2006-3740Integer overflow in the scan_cidfont function in X.Org 6.8.2…
• CVE-2006-3741The perfmonctl system call (sys_perfmonctl) in Linux kernel …
• CVE-2006-3742The KDE PAM configuration shipped with Fedora Core 5 causes …
• CVE-2006-3743Multiple buffer overflows in ImageMagick before 6.2.9 allow …
• CVE-2006-3744Multiple integer overflows in ImageMagick before 6.2.9 allow…
• CVE-2006-3746Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allow…
• CVE-2006-3747Off-by-one error in the ldap scheme handling in the Rewrite …
• CVE-2006-3748PHP remote file inclusion vulnerability in includes/abbc/abb…
• CVE-2006-3749PHP remote file inclusion vulnerability in sitemap.xml.php i…
• CVE-2006-3750PHP remote file inclusion vulnerability in server.php in the…
• CVE-2006-3751PHP remote file inclusion vulnerability in popups/ImageManag…