CVE-2006-5873: Debian Linux

High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Buffer overflow in the cluster_process_heartbeat function in cluster.c in layer 2 tunneling protocol network server (l2tpns) before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet.

Affected products

• Debian Debian Linux: version 3.1 only
• l2tpns l2tpns: version 1.1 only; version 2.0.13 only; version 2.1 only

Published 2006-12-12. Last modified 2026-06-16.