Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

Linux kernel and FreeBSD crash with NAT and ping route

CVE-1999-1339 · published 26 years ago
Summary

Systems running Linux kernel version 2.2.10 or earlier with NAT enabled, or FreeBSD 3.2 using its firewall, can be forced to stop working when an attacker sends a specially crafted ping command. The attack makes the operating system’s core crash, causing a denial of service. Upgrade to a newer kernel or disable NAT/ping‑record‑route on the affected versions to protect your servers.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
freebsd freebsd 3.2
cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*
linux linux_kernel <= 2.2.10
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Original advisory text
Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel pan...
Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
3% chance of attack within 30 days
Timeline
Published31 Dec 1999
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-1999-1339 · NVD
Track software like this
Free during beta