CVE-1999-1024: ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a...

Security readout for executives and security teams

This is a denial-of-service flaw in Tcpdump 3.4a. A specially malformed IP packet with a zero-length header can make tcpdump loop and crash while printing the packet. The known impact is loss of the packet-capture process, not host takeover. Exposure is likely limited to systems still running Tcpdump 3.4a or derived vulnerable code while inspecting untrusted network traffic. Modern environments are unlikely to run this exact 1999-era version, but legacy appliances, forensic images, or unmanaged monitoring hosts should be checked. Treat as a legacy availability risk. It is not evidence of compromise, but vulnerable monitoring systems may fail during traffic analysis. Prioritize if old tcpdump versions are used in production visibility, incident response, or network operations. Mitigation focus: Inventory systems and appliances for Tcpdump 3.4a usage.; Check tcpdump or operating-system vendor guidance for fixed versions.; Replace or upgrade affected tcpdump deployments where vendor guidance confirms exposure..

Prepared

Jul 1, 2026, 09:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.