NULL pointer dereference in Libnids Project

CVE-2010-0751

The ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via crafted fragmented packets.

EPSS: 0.039 (89.3th percentile) — read the EPSS interpretation.

Affected products

Libnids_project Libnids
Fedoraproject Fedora — versions 12, 11, 13
N/a — versions n/a

Weakness classification (CWE)

CWE-476 — NULL Pointer Dereference

References

secalert@redhat.com (x_refsource_CONFIRM, Product, Third Party Advisory)
secalert@redhat.com (x_refsource_FEDORA, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_FEDORA, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_FEDORA, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
secalert@redhat.com (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
secalert@redhat.com (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
secalert@redhat.com (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
secalert@redhat.com (Exploit, x_refsource_MISC, Third Party Advisory)