Is CVE-1999-0345 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-0345 being exploited in the wild.

How severe is CVE-1999-0345?

Medium severity, with a CVSS score of 5, published 1 January 1997.

Is there a fix for CVE-1999-0345?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-1999-0345 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-1999-0345?

Check whether you run Microsoft Windows 95 or Microsoft Windows Nt. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-0345: Microsoft Windows 95 and NT denial of service via Jolt ICMP attack

CVE-1999-0345 · Severity: medium · CVSS 5 · Published 1997-01-01

A vulnerability in older Microsoft Windows operating systems allows an attacker to crash or freeze a computer over the network. By sending a specific type of malicious network traffic known as a Jolt ICMP attack, an attacker can disrupt business operations by forcing systems offline. This results in a denial of service, preventing legitimate users from accessing the affected machines.

Technologies: Microsoft Windows 95, Microsoft Windows Nt. Vendors: Microsoft.

Quick answers

Is CVE-1999-0345 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-0345 being exploited in the wild.
How severe is CVE-1999-0345?: Medium severity, with a CVSS score of 5, published 1 January 1997.
Which products and versions are affected?: Microsoft Windows 95; Microsoft Windows NT.
Is there a fix for CVE-1999-0345?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-1999-0345 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-1999-0345?: Check whether you run Microsoft Windows 95 or Microsoft Windows Nt. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a denial of service (DoS) flaw in the networking stack of Windows 95 and Windows NT. It is triggered by the 'Jolt' attack, which involves sending a stream of fragmented ICMP (Internet Control Message Protocol) packets that the operating system cannot properly reassemble or process. An unauthenticated remote attacker can exploit this by sending these malformed packets over the network to a target system, leading to a system hang or crash. This vulnerability is a classic example of improper handling of fragmented IP traffic. Patching or upgrading to a modern, supported operating system is required to mitigate this risk.

Affected products

Microsoft Windows 95
Microsoft Windows NT

Timeline

1997-01-01: disclosed: Initial publication date

References

http://www.securityfocus.com/archive/1/62170

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.