Every CVE Search/ Get API key

CVE-1999-1423

ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a...

2.1 LowPublic exploit

ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i.

Exploit likelihood

0.91%Down 1.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i.

Record
CVE-1999-1423
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i.

Record
CVE-1999-1423
Updated
2026-11-02
EUVDEUVD-1999-1404 No score

ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i.

Record
EUVD-1999-1404
Updated
2026-11-03
GitHub AdvisoriesGHSA-c9v3-wqvp-m35p No score

ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a...

ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i.

Record
GHSA-c9v3-wqvp-m35p
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBSolaris 2.5.1 - 'Ping' System Panic (Denial of Service)1997-06-15

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-1999-1423 is a low vulnerability (CVSS 2.1) in Sun Solaris, published June 26, 1997. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.91%, the 60th percentile. No source names a fixed version.

References

MoveEnter Open