CVE-1999-1018 Security feature bypass in n/a
Remote attackers can bypass IPChains firewall rules by sending fragmented packets, allowing unauthorized network access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-1999-1018?
CVE-1999-1018 is a high-severity vulnerability in Linux kernel, published on 12 Sep 2001. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets.
Which versions are affected by CVE-1999-1018?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-1999-1018?
No fix has been published for CVE-1999-1018 yet. Limit exposure of the affected software until one is available.
Is CVE-1999-1018 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-1999-1018 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-3xc5-vgfg-rqw3.