{"id":"CVE-1999-0524","aliases":["AZL-6510","EUVD-1999-0522","GHSA-5qg4-5cpf-4r9p"],"status":"published","title":"ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.","description":"ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.32154,"percentile":0.98328,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-200"],"published":"1997-08-01T04:00:00Z","modified":"2026-06-16T21:48:34Z","exploits":[{"source":"pocgithub","id":"Ransc0rp1on/ICMP-Timestamp-POC","title":"Ransc0rp1on/ICMP-Timestamp-POC","date":"2025-05-27","url":"https://github.com/Ransc0rp1on/ICMP-Timestamp-POC"},{"source":"pocgithub","id":"biontdv/CVE-1999-0524-POC","title":"biontdv/CVE-1999-0524-POC","date":"2026-07-14","url":"https://github.com/biontdv/CVE-1999-0524-POC"},{"source":"pocgithub","id":"threatlabindonesia/CVE-1999-0524-ICMP-Timestamp-and-Address-Mask-Request-Exploit","title":"threatlabindonesia/CVE-1999-0524-ICMP-Timestamp-and-Address-Mask-Request-Exploit","date":"2024-11-25","url":"https://github.com/threatlabindonesia/CVE-1999-0524-ICMP-Timestamp-and-Address-Mask-Request-Exploit"}],"fixes":[{"ecosystem":"Azure Linux:2","package":"kernel","fixed_in":["5.10.78.1-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.78.1-1"}]}]}],"products":[{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"macos"},{"vendor":"cisco","product":"ios"},{"vendor":"hp","product":"hp-ux"},{"vendor":"hp","product":"tru64"},{"vendor":"ibm","product":"aix"},{"vendor":"ibm","product":"os2"},{"vendor":"linux","product":"linux_kernel"},{"vendor":"microsoft","product":"windows"},{"vendor":"novell","product":"netware"},{"vendor":"oracle","product":"solaris"},{"vendor":"sco","product":"sco_unix"},{"vendor":"sgi","product":"irix"},{"vendor":"windriver","product":"bsdos"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/322","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10053","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://descriptions.securescout.com/tc/11010","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/306","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://descriptions.securescout.com/tc/11011","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"http://www.osvdb.org/95","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC\u0026externalId=1434","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K15277"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-1999-0524","tags":["web"]},{"url":"https://github.com/advisories/GHSA-5qg4-5cpf-4r9p"}],"sources":{"cve":[{"id":"CVE-1999-0524","description":"ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.","status":"published","published":"2000-02-04T05:00:00Z","modified":"2026-05-28T17:44:18.231Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:33:53.911988Z"}],"euvd":[{"id":"EUVD-1999-0522","description":"ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.","status":"published","published":"2000-02-04T05:00:00Z","modified":"2026-05-28T17:44:18Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:21:02.186346Z"}],"ghsa":[{"id":"GHSA-5qg4-5cpf-4r9p","title":"ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.","description":"ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.","status":"published","published":"2022-04-30T18:10:45Z","modified":"2026-05-28T18:31:29Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:08:22.24664Z"}],"nvd":[{"id":"CVE-1999-0524","description":"ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.","status":"published","published":"1997-08-01T04:00:00Z","modified":"2026-06-16T21:48:34.703Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T13:58:19.254283Z"}],"osv":[{"id":"AZL-6510","title":"CVE-1999-0524 affecting package kernel for versions less than 5.10.78.1-1","description":"ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.","status":"published","published":"1997-08-01T04:00:00Z","modified":"2026-04-21T04:37:30.229682Z","updated_at":"2026-11-02T15:28:08.076947Z"}]}}