CVE-1999-0986: Medium severity Debian Debian Linux vulnerability
The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
pingfrom your environment.Uninstall or remove the ping utility from systems where it is not required to eliminate the vulnerable functionality.
- Configuration
Disable or remove support for the -R (record route) option in the ping utility (for example, rebuild/replace the ping binary without record-route support) to prevent sending large -R packets.
ping command record-route (-R) = disabled - Compensating control
Restrict local user ability to execute the ping utility to trusted/administrative accounts (for example, change file permissions or use filesystem ACLs) so unprivileged local users cannot invoke ping -R.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0986?
CVE-1999-0986 has been classified as a denial of service vulnerability.
How do I fix CVE-1999-0986?
To mitigate CVE-1999-0986, avoid using the ping command with the -R option or upgrade to a patched version of the Linux kernel.
Which versions of Linux are affected by CVE-1999-0986?
CVE-1999-0986 affects Linux Kernel versions 2.0.3x and specific distributions like Debian 2.1 and Red Hat Linux 5.2.
Can CVE-1999-0986 be exploited remotely?
CVE-1999-0986 cannot be exploited remotely as it requires local user access to the system.
What does the -R option do in the context of CVE-1999-0986?
In the context of CVE-1999-0986, the -R option in the ping command allows the sender to record the route packets take, which can be exploited to cause a denial of service.