CVE-2011-4093: Armin Burgmeier NET6

Medium severity, CVSS 5.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided.

Affected products

• Armin Burgmeier NET6: up to and including 1.3.13; version 1.3.1 only; version 1.3.2 only; version 1.3.3 only; version 1.3.4 only; version 1.3.5 only; …
• Opensuse Opensuse: version 11.3 only
• Opensuse Project Opensuse: version 11.4 only
• Oracle Solaris: version 11.2 only

Published 2014-02-10. Last modified 2026-06-16.