CVE Catalog
CVE-1999-1018
HighExploitation Probability (EPSS)
Very high risk7.22%
94th percentile - higher than 94% of all known CVEs
Summary
IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets.
Risk Assessment
The organization may be exposed to attacks that bypass network security measures, potentially leading to unauthorized access to systems.
Recommendation
It is recommended to upgrade the Linux kernel to a version newer than 2.2.10 to mitigate this vulnerability.
Original NVD description (English source)
IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets.