CVE-2006-3121: High Availability Linux Project Heartbeat

Medium severity, CVSS 5.0. EPSS: 13.6% chance of exploitation in the next 30 days.

The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service (crash) via the length parameter in a heartbeat message.

Affected products

• High Availability Linux Project Heartbeat: version 1.2.3 only; version 1.2.4 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; …

Published 2006-08-17. Last modified 2026-06-16.