CVE-1999-1018: IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header in...

Security readout for executives and security teams

This is an old Linux firewall flaw: IPChains could evaluate fragmented packets before fully reassembling them. A remote attacker might bypass filtering rules if a system still relies on affected Linux 2.2.10 or earlier IPChains behavior. Likely limited to legacy or embedded systems still running Linux 2.2.10 or earlier with IPChains-based filtering. Modern Linux distributions should not normally be exposed, but unsupported appliances may require confirmation. Prioritize this if the organization has legacy Linux, embedded network appliances, or unmanaged perimeter hosts. For modern estates, urgency is lower but asset validation is still warranted. Mitigation focus: Inventory systems for Linux 2.2.10 or earlier and IPChains use.; Check original vendor or distribution guidance for supported remediation.; Retire or replace unsupported systems that still depend on affected IPChains filtering..

Prepared

Jul 1, 2026, 09:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.