CVE-2006-6395
CVE-2006-6395 is a medium-severity vulnerability in Ulrik Petersen Emdros Database Engine with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 1% (65th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Ulrik Petersen Emdros Database Engine
- Published:
- Last modified:
Description
Multiple memory leaks in Ulrik Petersen Emdros Database Engine before 1.2.0.pre231 allow local users to cause a denial of service (memory consumption) via unspecified vectors, a different issue than CVE-2005-0415.
Frequently asked questions
- What is CVE-2006-6395?
- Multiple memory leaks in Ulrik Petersen Emdros Database Engine before 1.2.0.pre231 allow local users to cause a denial of service (memory consumption) via unspecified vectors, a different issue than CVE-2005-0415.
- How severe is CVE-2006-6395?
- CVE-2006-6395 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2006-6395 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (65th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-6395?
- CVE-2006-6395 primarily affects Ulrik Petersen Emdros Database Engine. In total, 12 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2006-6395?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2006-6395 published?
- CVE-2006-6395 was published on 2006-12-08 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/23231
- http://sourceforge.net/mailarchive/forum.php?thread_id=31151112&forum_id=2949
- http://sourceforge.net/project/shownotes.php?release_id=468120
- http://www.securityfocus.com/bid/21444
- http://www.vupen.com/english/advisories/2006/4859
Affected products (12)
- cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.2.0.pre142:*:*:*:*:*:*:*
- cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.2.0.pre143:*:*:*:*:*:*:*
- cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.2.0.pre155:*:*:*:*:*:*:*
- cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.2.0.pre160:*:*:*:*:*:*:*
- cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.2.0.pre167:*:*:*:*:*:*:*
- cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.2.0.pre172:*:*:*:*:*:*:*
- cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.2.0.pre195:*:*:*:*:*:*:*
- cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.2.0.pre206:*:*:*:*:*:*:*
- cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.2.0.pre218:*:*:*:*:*:*:*
- cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.2.0.pre222:*:*:*:*:*:*:*
- cpe:2.3:a:ulrik_petersen:emdros_database_engine:1.2.0.pre225:*:*:*:*:*:*:*
- cpe:2.3:a:ulrik_petersen:emrdos_database_engine:1.2.0.pre230:*:*:*:*:*:*:*
More vulnerabilities in Ulrik Petersen Emdros Database Engine
- CVE-2005-0415 — Medium (CVSS 5.0): Multiple memory leaks in the MQL parser in Emdros before 1.1.22 allow remote attackers to cause a denial of service…