CVE-1999-0396: Netbsd

Low severity, CVSS 2.6. EPSS: 1.3% chance of exploitation in the next 30 days.

A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.

Affected products

• Netbsd Netbsd: version 2.0.4 only
• OpenBSD OpenBSD: version 2.4 only

Published 1999-02-17. Last modified 2026-06-16.