CVE-2010-0751

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-04-06 · updated 2026-06-16
Weakness: CWE-476

Description

The ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via crafted fragmented packets.

Affected products

Fedoraproject Fedora: 11, 12, 13
Libnids Project Libnids: before 1.24 — fixed in 1.24

How to fix

Upgrade to a fixed version: Libnids Project Libnids 1.24. Check the vendor advisory for mitigations.

References

http://freefr.dl.sourceforge.net/project/libnids/libnids/1.24/libnids-1.24.releasenotes.txt
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038375.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038388.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038410.html
http://secunia.com/advisories/39225
http://secunia.com/advisories/39249
http://www.securityfocus.com/bid/39142
http://www.vupen.com/english/advisories/2010/0777
http://www.vupen.com/english/advisories/2010/0791
http://xorl.wordpress.com/2010/04/04/libnids-ip-fragmentation-remote-null-pointer-dereference/
https://exchange.xforce.ibmcloud.com/vulnerabilities/57428
http://freefr.dl.sourceforge.net/project/libnids/libnids/1.24/libnids-1.24.releasenotes.txt

Get alerted when CVE-2010-0751 or the next vulnerability affects your stack