CVE-2003-0850: Dug Song Dsniff

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."

Affected products

• Dug Song Dsniff: version 2.3 only
• Rafal Wojtczuk Libnids: version 1.11 only; version 1.12 only; version 1.13 only; version 1.14 only; version 1.16 only; version 1.17 only

Published 2003-11-17. Last modified 2026-06-16.