ID:10314 - Exploit for Improper input validation in Linux kernel - CVE-1999-1018

 
Main Vulnerability Database Exploits ID:10314 - Exploit for Improper input validation in Linux kernel - CVE-1999-1018

ID:10314 - Exploit for Improper input validation in Linux kernel - CVE-1999-1018

Published: August 7, 2024


Vulnerability identifier: #VU95492
Vulnerability risk: Low
CVE-ID: CVE-1999-1018
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets.


Remediation

Install update from vendor's repository.