CVE-2006-6653: Netbsd

Low severity, CVSS 1.7. EPSS: 0.3% chance of exploitation in the next 30 days.

The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (socket consumption) via an invalid (1) name or (2) namelen parameter, which may result in the socket never being closed (aka "a dangling socket").

Affected products

• Netbsd Netbsd: version 2.0 only; version 3.0 only; version 3.0.1 only; version current only

Published 2006-12-20. Last modified 2026-06-16.