The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux.
Fix
Patch, vendor advisory and mitigation references on NVD 6
- http://www.iss.net/security_center/static/8588.php Vendor Advisory
- http://www.securityfocus.com/archive/1/262840 Vendor Advisory
- http://www.securityfocus.com/bid/4314 Vendor Advisory
- http://www.iss.net/security_center/static/8588.php Vendor Advisory
- http://www.securityfocus.com/archive/1/262840 Vendor Advisory
- http://www.securityfocus.com/bid/4314 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.0 · linuxNVD modified 2026-10-09 20:17
Affected (CPE criteria) 19
cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*
References 6
- http://www.iss.net/security_center/static/8588.php Vendor Advisory
- http://www.securityfocus.com/archive/1/262840 Vendor Advisory
- http://www.securityfocus.com/bid/4314 Vendor Advisory
- http://www.iss.net/security_center/static/8588.php Vendor Advisory
- http://www.securityfocus.com/archive/1/262840 Vendor Advisory
- http://www.securityfocus.com/bid/4314 Vendor Advisory