CVE Catalog

CVE-1999-0426

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
10.56%

95th percentile - higher than 95% of all known CVEs

Summary

The default permissions of /dev/kmem in Linux versions before 2.0.36 allow IP spoofing.

Risk Assessment

Organizations may be exposed to IP spoofing attacks, potentially leading to unauthorized access to systems.

Recommendation

It is recommended to upgrade the Linux system to version 2.0.36 or later to mitigate this vulnerability.

Original NVD description (English source)

The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS