What’s Vulnerable › Vulnerabilities

CVE-1999-1339

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 1999-12-31 · updated 2026-06-16

Description

Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.

Affected products

• FreeBSD: 3.2
• Linux kernel: through 2.2.10

References

• http://marc.info/?l=bugtraq&m=93277426802802&w=2
• http://marc.info/?l=bugtraq&m=93277766505061&w=2
• http://www.iss.net/security_center/static/7257.php
• http://www.kernel.org/pub/linux/kernel/v2.2/patch-2.2.11.gz
• http://www.osvdb.org/6105
• http://marc.info/?l=bugtraq&m=93277426802802&w=2
• http://marc.info/?l=bugtraq&m=93277766505061&w=2
• http://www.iss.net/security_center/static/7257.php
• http://www.kernel.org/pub/linux/kernel/v2.2/patch-2.2.11.gz
• http://www.osvdb.org/6105

Get alerted when CVE-1999-1339 or the next vulnerability affects your stack