CVE-1999-1157: Microsoft Windows Nt

Medium severity, CVSS 5.0. EPSS: 13.3% chance of exploitation in the next 30 days.

Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface.

Affected products

• Microsoft Windows Nt: up to and including 4.0

Published 1999-12-31. Last modified 2026-06-16.