debian/libnids vulnerabilities

Latest debian/libnids CVEs

Newest publication first

1. CVE-2010-0751 The ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash...

   Published 2010-04-06

   Medium·CVSS 5.0 EPSS 3.9%

   The ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via crafted fragmented packets.

2. DSA-410 libnids - buffer overflow

   Published 2004-01-05

   Unknown

3. CVE-2003-0850 The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."

   Published 2003-10-25

   High·CVSS 7.5 EPSS 3.8%

   The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.