Vulnerability Details : CVE-2001-1398
Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability.
Exploit prediction scoring system (EPSS) score for CVE-2001-1398
Probability of exploitation activity in the next 30 days: 1.30%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 84 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2001-1398
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2001-1398
-
http://www.redhat.com/support/errata/RHSA-2001-047.html
SupportPatch;Vendor Advisory
-
http://marc.info/?l=bugtraq&m=98653252326445&w=2
'Trustix Security Advisory #2001-0003 - kernel' - MARC
-
http://marc.info/?l=bugtraq&m=98575345009963&w=2
'Immunix OS Security update for kernel' - MARC
-
http://marc.info/?l=bugtraq&m=98637996127004&w=2
'Security update: several security problems in linux kernel' - MARC
-
http://marc.info/?l=bugtraq&m=98759029811377&w=2
'MDKSA-2001:037 - kernel update' - MARC
-
http://marc.info/?l=bugtraq&m=99013830726309&w=2
'SuSE Security Announcement: kernel (SuSE-SA:2001:18)' - MARC
-
http://marc.info/?l=bugtraq&m=98775114228203&w=2
'[CLA-2001:394] Conectiva Linux Security Announcement - kernel' - MARC
-
http://marc.info/?l=bugtraq&m=98684172109474&w=2
'PROGENY-SA-2001-01: execve()/ptrace() exploit in Linux kernels' - MARC
-
https://www.debian.org/security/2001/dsa-047
Debian -- The Universal Operating System
-
http://www.linux.org.uk/VERSION/relnotes.2219.html
Linux.com - News For Open Source Professionals
Products affected by CVE-2001-1398
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*