CVE-1999-1230

Medium

Published: 24/12/1997(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.27%

66th percentile - higher than 66% of all known CVEs

Summary

The Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself.

Risk Assessment

Attackers can exploit this vulnerability to disrupt the server's operation, leading to service unavailability for players.

Recommendation

It is recommended to implement packet filtering at the firewall level to block spoofed UDP packets and to monitor network traffic for suspicious activities.

Original NVD description (English source)

Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself.