CVE-2005-2973

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-10-27 · updated 2026-06-16

Description

The udp_v6_get_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a denial of service (infinite loop and crash).

Affected products

Linux kernel: 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5 (+29)

References

http://linux.bkbits.net:8080/linux-2.6/cset%404342df67SNhRx_3FGhUrrU-FXLlQIA
http://secunia.com/advisories/17261
http://secunia.com/advisories/17280
http://secunia.com/advisories/17917
http://secunia.com/advisories/17918
http://secunia.com/advisories/18562
http://secunia.com/advisories/18684
http://secunia.com/advisories/19185
http://secunia.com/advisories/19369
http://secunia.com/advisories/19374
http://secunia.com/advisories/20237
http://secunia.com/advisories/21745

Get alerted when CVE-2005-2973 or the next vulnerability affects your stack