The tcp_fuse_rcv_drain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is enabled, allows local users to cause a denial of service (system crash) via a TCP loopback connection with both endpoints on the same system.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Solaris | Sun | 10.0 (including) | 10.0 (including) |