By publication date
Exploited and new serious CVEs: December 1997
5 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
49Plan | CVE-1999-0016Proof of concept | Land IP denial of service.cisco · ios | Medium5.0 | — | 95.6% | Dec 1, 1997 |
43Plan | CVE-1999-0018Proof of concept | Buffer overflow in statd allows root privileges.sgi · irix | Critical10.0 | — | 10.4% | Dec 5, 1997 |
31Monitor | CVE-1999-0015Proof of concept | Teardrop IP denial of service.hp · hp-ux | Medium5.0 | — | 35.4% | Dec 16, 1997 |
26Monitor | CVE-1999-1581No exploit | Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers tmicrosoft · windows nt | Medium5.0 | — | 20.6% | Dec 23, 1997 |
26Monitor | CVE-1999-0107Proof of concept | Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests contaiapache · http server | Medium5.0 | — | 19.9% | Dec 30, 1997 |
- CVE-1999-001649Plan
Land IP denial of service.
MediumCVSS 5.0Proof of conceptEPSS 95%cisco · iosDec 1, 1997
- CVE-1999-001843Plan
Buffer overflow in statd allows root privileges.
CriticalCVSS 10.0Proof of conceptEPSS 10%sgi · irixDec 5, 1997
- CVE-1999-001531Monitor
Teardrop IP denial of service.
MediumCVSS 5.0Proof of conceptEPSS 35%hp · hp-uxDec 16, 1997
- CVE-1999-158126Monitor
Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers t
MediumCVSS 5.0No exploitEPSS 20%microsoft · windows ntDec 23, 1997
- CVE-1999-010726Monitor
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests contai
MediumCVSS 5.0Proof of conceptEPSS 19%apache · http serverDec 30, 1997