CVE-2006-5396: Sun Solaris

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The tcp_fuse_rcv_drain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is enabled, allows local users to cause a denial of service (system crash) via a TCP loopback connection with both endpoints on the same system.

Affected products

• Sun Solaris: version 10.0 only

Published 2006-10-18. Last modified 2026-06-16.