CVE-2010-0751 The ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash...
MediumCVSS 5.0
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via crafted fragmented packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libnids project libnids | < 1.24 | 1.24 |
| fedoraproject fedora | = 11 | No fix listed |
| fedoraproject fedora | = 12 | No fix listed |
| fedoraproject fedora | = 13 | No fix listed |
| debian/libnids(Debian:12) | < 1.23-1.2 | 1.23-1.2 |
| debian/libnids(Debian:13) | < 1.23-1.2 | 1.23-1.2 |
| debian/libnids(Debian:14) | < 1.23-1.2 | 1.23-1.2 |
References
- freefr.dl.sourceforge.net product third-party-advisory
- FEDORA-2010-5535 third-party-advisory vendor-advisory
- FEDORA-2010-5545 third-party-advisory vendor-advisory
- FEDORA-2010-5562 third-party-advisory vendor-advisory
- 39225 third-party-advisory
- 39249 third-party-advisory
- 39142 third-party-advisory vdb-entry
- ADV-2010-0777 third-party-advisory vdb-entry
- ADV-2010-0791 third-party-advisory vdb-entry
- xorl.wordpress.com exploit third-party-advisory
- libnids-ipfragment-dos(57428) third-party-advisory vdb-entry
- Debian Security Tracker CVE-2010-0751 vendor-advisory
- bugs.debian.org issue-tracking