CVE-1999-0128: Medium severity SCO OpenServer vulnerability
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure the host kernel networking settings or local firewall (for example via iptables/nftables/host firewall policies) to reject or drop ICMP echo requests that exceed expected packet sizes and to apply rate-limiting for ICMP traffic.
Operating system network stack / host firewall ICMP packet size/handling and rate-limiting = drop or limit oversized ICMP packets; apply ICMP rate limits - Compensating control
At the network perimeter, block or rate-limit ICMP echo requests and oversized ICMP packets (for example, drop ICMP packets exceeding the expected MTU) using firewall/ACL/WAF rules to mitigate Ping o' Death attacks.
- Operational
Enable logging and monitoring for abnormal or oversized ICMP traffic and create alerts to detect and respond to potential Ping o' Death attempts.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0128?
CVE-1999-0128 is classified as a high severity vulnerability due to its potential to cause denial of service via oversized ICMP ping packets.
How do I fix CVE-1999-0128?
To mitigate CVE-1999-0128, ensure that your systems have updated firewall rules to block oversized ICMP packets and apply relevant security patches.
What types of systems are affected by CVE-1999-0128?
CVE-1999-0128 affects various systems, including Digital OSF/1, IBM AIX, Linux Kernel, and Sun SunOS.
Can CVE-1999-0128 lead to a complete system crash?
Yes, CVE-1999-0128 can lead to a complete system crash if it is exploited through overflowing ICMP packets.
What is the exploit mechanism behind CVE-1999-0128?
CVE-1999-0128 exploits the vulnerability by sending oversized ping packets that overwhelm the target system's ability to process them.