medium5.0Public exploit code
CVE-1999-0986
The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel 2.0.x (Debian 2.1 / RedHat 5.2) - Packet Length with Options1999-12-08 · dos · linux · Verified
Impact
The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Debian Linux | Version 2.1 |
| Linux | Linux Kernel | Versions 2.0, 2.0.34, 2.0.35, 2.0.36, 2.0.37, 2.0.38 |
| Redhat | Linux | Version 5.2 |