CVE-1999-1018: Linux Kernel

High severity, CVSS 7.5. EPSS: 7.2% chance of exploitation in the next 30 days.

IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets.

Affected products

• Linux Linux Kernel: up to and including 2.2.10; version 2.2.0 only

Published 1999-07-27. Last modified 2026-06-16.