CVE-2002-1912 Null dereference in n/a
Remote attackers can cause a kernel panic and denial of service on SkyStream EMR5000 devices by sending excessive packets that trigger a null pointer exception.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-1912?
CVE-2002-1912 is a high-severity vulnerability in n/a, published on 28 Jun 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when the buffers are full, which allows remote attackers to cause a denial of service (null pointer exception and kernel panic) via a large number of packets.
Weakness: CWE-476
Which versions are affected by CVE-2002-1912?
It affects 1 product.
Products include Skystream Emr5000.
How do I fix CVE-2002-1912?
No fix has been published for CVE-2002-1912 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-1912 being exploited?
There is no known exploitation of CVE-2002-1912 in the wild and no public exploit code.
Sources
Also known as GHSA-rrxf-p629-997j.