The issue allows remote attackers to cause a denial of service via crafted fragmented packets, resulting in a NULL pointer dereference and crash. This is due to a problem in the `ip evictor` function in `ip fragment.c`, which is used in products such as dsniff.