CVE-1999-0804: Medium severity Debian Debian Linux vulnerability
Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Temporarily disable ICMP echo responses by setting net.ipv4.icmp_echo_ignore_all=1 (for example via sysctl) to reduce exposure to malformed ICMP packets until a kernel patch is installed.
Linux kernel (sysctl) net.ipv4.icmp_echo_ignore_all = 1 - Compensating control
Block, drop, or rate-limit ICMP traffic at the network perimeter (firewall/ACL) to prevent malformed ICMP packets from reaching affected hosts until a kernel fix is applied.
- Operational
Monitor for ICMP-based denial-of-service activity and apply vendor-supplied kernel updates/patches as soon as they become available; reboot affected systems to activate kernel fixes.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0804?
CVE-1999-0804 has been classified as a denial of service vulnerability, which can disrupt services on affected Linux systems.
How do I fix CVE-1999-0804?
To mitigate CVE-1999-0804, update your Linux kernel to a version that is not vulnerable, ideally one later than 2.2.x.
Which Linux versions are affected by CVE-1999-0804?
CVE-1999-0804 affects Linux kernel versions 2.2.x and specific distributions like Debian 2.1, Red Hat 6.0, and SUSE 6.1.
What causes the vulnerability identified in CVE-1999-0804?
CVE-1999-0804 is caused by a flaw in how the Linux kernel handles malformed ICMP packets.
Is CVE-1999-0804 exploitable remotely?
Yes, CVE-1999-0804 can be exploited remotely, allowing attackers to send malformed ICMP packets to the target system.