PatchTheCVElibnids vulnerabilities and fixes
Recent CVEs affecting libnids, with upgrade or downgrade steps. 2 tracked.
libnids has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2010-04-06. Highest priority: CVE-2003-0850 (score 49/100).
- CVE-2010-0751 MEDIUM 5.0 UPGRADE MITIGATE The ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsniff and possibly other products
- CVE-2003-0850 HIGH 7.5 DOWNGRADE DOWNGRADE The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" a
FAQ
How do I fix libnids vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libnids being exploited right now?
None of the tracked libnids CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libnids CVE should I patch first?
CVE-2003-0850 currently ranks highest (49/100): The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" a.