Is CVE-1999-0258 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-0258 being exploited in the wild.

How severe is CVE-1999-0258?

Medium severity, with a CVSS score of 5, published 13 February 1998.

Which products and versions are affected?

Microsoft Windows NT 4.0 Service Pack 3 and earlier; Microsoft Windows NT 3.51 Service Pack 5 and earlier; Microsoft Windows 95 All versions.

Is there a fix for CVE-1999-0258?

A patch was published on 1998-01-01: Microsoft released the NewTear/Bonk/Boink hotfix. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-1999-0258 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-1999-0258?

Check whether you run Microsoft Windows Nt. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-0258: Microsoft Windows TCP/IP stack denial of service in IP fragmentation

CVE-1999-0258 · Severity: medium · CVSS 5 · Published 1998-02-13

A vulnerability in the networking components of older Windows operating systems allows remote attackers to crash or reboot a computer. By sending specially crafted network traffic, an attacker can cause a 'Blue Screen of Death' or an unexpected system restart, leading to a total loss of availability for the affected machine. This issue primarily impacts the reliability of systems connected to the internet or local networks.

Technologies: Microsoft Windows Nt. Vendors: Microsoft.

Quick answers

Is CVE-1999-0258 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-0258 being exploited in the wild.
How severe is CVE-1999-0258?: Medium severity, with a CVSS score of 5, published 13 February 1998.
Which products and versions are affected?: Microsoft Windows NT 4.0 Service Pack 3 and earlier; Microsoft Windows NT 3.51 Service Pack 5 and earlier; Microsoft Windows 95 All versions.
Is there a fix for CVE-1999-0258?: A patch was published on 1998-01-01: Microsoft released the NewTear/Bonk/Boink hotfix. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-1999-0258 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-1999-0258?: Check whether you run Microsoft Windows Nt. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a variation of the 'Teardrop' attack, specifically known as 'Bonk'. It resides in the TCP/IP stack's handling of fragmented IP packets. An attacker sends a two-packet sequence of malformed UDP fragments (often targeting the DNS port to bypass firewalls) that overlap or contain invalid offset values. When the operating system attempts to reassemble these fragments, it triggers a kernel-level exception, resulting in a system crash (BSOD) or a spontaneous reboot. The issue affects Windows NT 3.51, NT 4.0, and Windows 95. Microsoft released the 'NewTear/Bonk/Boink' hotfix in early 1998 to address this flaw.

Affected products

Microsoft Windows NT 4.0 Service Pack 3 and earlier
Microsoft Windows NT 3.51 Service Pack 5 and earlier
Microsoft Windows 95 All versions

Timeline

1998-01-01: patched: Microsoft released the NewTear/Bonk/Boink hotfix.
1998-02-13: advisory: NVD publication date.
1998-03-04: other: Microsoft technical update regarding widespread active exploitation.

References

https://marc.info/?l=ntbugtraq&m=88901842000424&w=2

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.