CVE-1999-0377: Medium severity Unix Unix vulnerability
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure OS resource limits to prevent a single user or service from consuming all process table entries (e.g., set per-user/process limits on number of processes).
Unix system process table / per-user process limits = restrict to reasonable maximum - Configuration
Configure network services to limit simultaneous connections and apply connection-rate throttling (per-IP or per-session) to prevent exhaustion of process table entries from many connections.
Network services simultaneous connections / connection rate = limit and throttle - Compensating control
Deploy network-level controls (firewall, ACLs, or rate-limiting at perimeter devices) to restrict or throttle large numbers of connections to affected services and block abusive sources.
- Operational
Monitor process table usage and connection counts; detect and terminate abusive connection patterns and restart impacted services as needed. Establish alerts for rapid growth in processes or connections.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0377?
The severity of CVE-1999-0377 is considered high due to its potential to cause a denial of service.
How do I fix CVE-1999-0377?
To fix CVE-1999-0377, implement restriction on the number of simultaneous connections to network services or configure appropriate process limits in your Unix system.
What systems are impacted by CVE-1999-0377?
CVE-1999-0377 impacts Unix systems that allow multiple connections to network services.
Can CVE-1999-0377 be exploited remotely?
Yes, CVE-1999-0377 can be exploited remotely by attackers who can initiate multiple connections.
What are the consequences of CVE-1999-0377?
The consequences of CVE-1999-0377 include a denial of service that may render the affected Unix system unusable.