GNU Inet vulnerabilities

4 CVEs affecting GNU Inet, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-1999-0017, published 1997-12-10.

More from GNU.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-1999-0016, published 1997-12-01. Medium severity, CVSS 5.0. EPSS: 95.7% chance of exploitation in the next 30 days. Land IP denial of service.
• CVE-1999-0216, published 1997-11-01. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. Denial of service of inetd on Linux through SYN and RST packets.
• CVE-1999-0017, published 1997-12-10. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
• CVE-1999-0035, published 1997-05-29. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.