CVE-2005-2709
The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a...
4.6 MediumPublic exploitFix available
The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.
Exploit likelihood
0.99%Down 5.8 points since Feb 4, 2022
What each source reports
NVD Score used
The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.
- Record
CVE-2005-2709- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.
- Record
CVE-2005-2709- Updated
- 2026-11-02
EUVDEUVD-2005-2710 No score
The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.
- Record
EUVD-2005-2710- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-99j2-m6h7-666q No score
The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a...
The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.
- Record
GHSA-99j2-m6h7-666q- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.6.8Debian:3.1 |
before 2.6.8-16sarge2, plus listed versions 2.6.8-162.6.8-16sarge1 |
2.6.8-16sarge2 |
kernel-source-2.4.27Debian:3.1 |
before 2.4.27-10sarge2, plus listed versions 2.4.27-102.4.27-10sarge1 |
2.4.27-10sarge2 |
kernelRed Hat:enterprise_linux:4::as |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::as |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::as |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::as |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
Show 64 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernelRed Hat:enterprise_linux:4::es |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::es |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::es |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::es |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernelRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-22.0.2.EL | 0:2.6.9-22.0.2.EL |
kernelRed Hat:enterprise_linux:3::as |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::as |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::as |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::as |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::as |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::as |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernelRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernelRed Hat:enterprise_linux:3::es |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::es |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::es |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::es |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::es |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::es |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernelRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-37.0.1.EL | 0:2.4.21-37.0.1.EL |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.6.x - Sysctl Unregistration Local Denial of Service | 2005-11-09 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2709 is a medium vulnerability (CVSS 4.6) in Linux Kernel, published November 20, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.99%, the 62nd percentile. Fixed in kernel-source-2.6.8 2.6.8-16sarge2.
References
redhat.com/support/errata/RHSA-2006-0140.html
secunia.com/advisories/18684
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.1
vupen.com/english/advisories/2005/2359
Show 144 moreShow less
debian.org/security/2006/dsa-1018
securityfocus.com/archive/1/428058/100/0/threaded
securitytracker.com/id?1015434
osvdb.org/20676
usn.ubuntu.com/219-1
exchange.xforce.ibmcloud.com/vulnerabilities/23040
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10746
mandriva.com/security/advisories?name=MDKSA-2006:059
nvd.nist.gov/vuln/detail/CVE-2005-2709
github.com/advisories/GHSA-99j2-m6h7-666q
access.redhat.com/errata/RHSA-2006:0101
bugzilla.redhat.com/show_bug.cgi?id=158861
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0101.json
cve.org/CVERecord?id=CVE-2002-2185