CVE Catalog

CVE-1999-1341

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.41%

32th percentile - higher than 32% of all known CVEs

Summary

Linux kernel before 2.3.18 or 2.2.13pre15 with SLIP and PPP options allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices.

Risk Assessment

IP packet forging can lead to serious security issues, including spoofing attacks, which threaten network integrity.

Recommendation

It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and restrict access to the TIOCSETD option for unprivileged users.

Original NVD description (English source)

Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS