CVE Catalog
CVE-1999-0414
MediumExploitation Probability (EPSS)
Very high risk6.86%
93th percentile - higher than 93% of all known CVEs
Summary
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
Risk Assessment
Attackers can exploit this vulnerability to inject malicious data into applications, potentially leading to unauthorized access or other attacks.
Recommendation
It is recommended to upgrade the system to version 2.0.36 or later to mitigate this vulnerability.
Original NVD description (English source)
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.