CVE-2006-3920: Sun Solaris

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

The TCP implementation in Sun Solaris 8, 9, and 10 before 20060726 allows remote attackers to cause a denial of service (resource exhaustion) via a TCP packet with an incorrect sequence number, which triggers an ACK storm.

Affected products

• Sun Solaris: version 9.0 only; version 10.0 only
• Sun Sunos: version 5.8 only

Published 2006-07-28. Last modified 2026-06-16.