CVE-2006-2444

CVE-2006-2444 is a high-severity vulnerability in Linux Linux Kernel with a CVSS 2.0 base score of 7.8. Its EPSS exploit-prediction score of 21% places it in the 97th percentile, indicating an elevated likelihood of exploitation.

Key facts

Description

The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees of previously-freed memory (double-free) by snmp_trap_decode as well as its calling function, as demonstrated via certain test cases of the PROTOS SNMP test suite.

Frequently asked questions

What is CVE-2006-2444?
The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees of previously-freed memory (double-free) by snmp_trap_decode as well as its calling function, as demonstrated via certain test cases of the PROTOS SNMP test suite.
How severe is CVE-2006-2444?
CVE-2006-2444 has a CVSS 2.0 base score of 7.8, rated high severity.
Is CVE-2006-2444 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 21% (97th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2006-2444?
CVE-2006-2444 primarily affects Linux Linux Kernel. In total, 172 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2006-2444?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2006-2444 published?
CVE-2006-2444 was published on 2006-05-25 and last updated on 2026-06-16.

References

Affected products (172)

More vulnerabilities in Linux Linux Kernel

All CVEs affecting Linux Linux Kernel →