CVE-2010-0751 : The ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsni

The ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via crafted fragmented packets.

Published 2010-04-06 16:30:00

Updated 2020-08-05 15:04:34

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2010-0751

Fedoraproject » Fedora » Version: 11
cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 12
cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 13
cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*
Matching versions
Libnids Project » Libnids
Versions before (<) 1.24
cpe:2.3:a:libnids_project:libnids:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2010-0751

EPSS FAQ

2.46%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 89 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2010-0751

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

CWE ids for CVE-2010-0751

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2010-0751

http://freefr.dl.sourceforge.net/project/libnids/libnids/1.24/libnids-1.24.releasenotes.txt

Download Libnids - NIDS E-component library from SourceForge.net
Product;Third Party Advisory
http://www.vupen.com/english/advisories/2010/0777

Webmail | OVH- OVH
Third Party Advisory
http://www.securityfocus.com/bid/39142

Libnids 'ip_fragment.c' Null Pointer Deference Remote Denial of Service Vulnerability
Third Party Advisory;VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/57428

libnids ip_fragment.c, denial of service CVE-2010-0751 Vulnerability Report
Third Party Advisory;VDB Entry
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038410.html

[SECURITY] Fedora 13 Update: dsniff-2.4-0.9.b1.fc13
Third Party Advisory
http://xorl.wordpress.com/2010/04/04/libnids-ip-fragmentation-remote-null-pointer-dereference/

Libnids IP Fragmentation Remote NULL Pointer Dereference | xorl %eax, %eax
Exploit;Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038375.html

[SECURITY] Fedora 12 Update: dsniff-2.4-0.9.b1.fc12
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038388.html

[SECURITY] Fedora 11 Update: dsniff-2.4-0.9.b1.fc11
Third Party Advisory
http://www.vupen.com/english/advisories/2010/0791

Webmail | OVH- OVH
Third Party Advisory

Jump to

Vulnerability Details : CVE-2010-0751

Products affected by CVE-2010-0751

Exploit prediction scoring system (EPSS) score for CVE-2010-0751

CVSS scores for CVE-2010-0751

CWE ids for CVE-2010-0751

References for CVE-2010-0751