CVE-2006-3815
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared...
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup.
Exploit likelihood
What each source reports
NVD Score used
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup.
- Record
CVE-2006-3815- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup.
- Record
CVE-2006-3815- Updated
- 2026-11-02
EUVDEUVD-2006-3809 No score
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup.
- Record
EUVD-2006-3809- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-32c9-8jgc-9c8c No score
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared...
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup.
- Record
GHSA-32c9-8jgc-9c8c- Updated
- 2026-11-02
OSV No score
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup.
- Record
CVE-2006-3815- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-3815 No score
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup.
- Record
DEBIAN-CVE-2006-3815- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
heartbeatDebian:12 |
before 1.2.4-13 | 1.2.4-13 |
heartbeatDebian:13 |
before 1.2.4-13 | 1.2.4-13 |
heartbeatDebian:14 |
before 1.2.4-13 | 1.2.4-13 |
heartbeatDebian:3.1 |
before 1.2.3-9sarge5, plus listed versions 1.2.3-91.2.3-9sarge11.2.3-9sarge21.2.3-9sarge31.2.3-9sarge4 |
1.2.3-9sarge5 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux-HA Heartbeat 1.2.3/2.0.x - Insecure Default Permissions on Shared Memory | 2006-07-27 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3815 is a low vulnerability (CVSS 2.1) in Linux-ha Heartbeat, published July 24, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.78%, the 56th percentile. Fixed in heartbeat 1.2.4-13.
References
secunia.com/advisories/21231
vupen.com/english/advisories/2006/2994
security.gentoo.org/glsa/glsa-200608-23.xml
debian.org/security/2006/dsa-1128
mail-archive.com/linux-ha-cvs%40lists.linux-ha.org/msg00753.html
Show 12 moreShow less
linux-ha.org/_cache/SecurityIssues__sec03.txt
mandriva.com/security/advisories?name=MDKSA-2006:142
securitytracker.com/id?1016602
securityfocus.com/bid/19186
ubuntu.com/usn/usn-326-1
cvs.linux-ha.org/viewcvs/viewcvs.cgi/linux-ha/heartbeat/heartbeat.c?r1=1.513&r2=1.514
nvd.nist.gov/vuln/detail/CVE-2006-3815
github.com/advisories/GHSA-32c9-8jgc-9c8c
security-tracker.debian.org/tracker/CVE-2006-3815