Skip to content
Back to search

CVE-1999-1406

LOW
2.1NVD

Summary

generated automatically from NVD data

The dumpreg utility in Red Hat Linux 5.1 opens /dev/mem with read-write (O_RDWR) access. A local user can exploit this by redirecting file descriptor 1 (stdout) to the kernel, which causes the system to crash and results in a denial of service. The flaw is rated LOW severity with a CVSS v2.0 score of 2.1, and it requires local access and has no impact on confidentiality or integrity.

NVD description

dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel.

Share:

EPSS · FIRST.org

0.37%probability of exploitation in the next 30 days

Higher than 31% of scored CVEs

EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-30, recomputed daily by FIRST.org.

CVSS v2.0 Score

2.1
/ 10.0
LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P

Information

Published
29 juil. 1998
Updated
16 juin 2026
Status
Modified
Source
cve@mitre.org

Affected products

Versions 5.1

Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.

Weaknesses (CWE)

NVD-CWE-Other

Similar CVEs

Other vulnerabilities of type

…

Running Linux servers? Know which CVEs hit your version.

Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.