CVE-2017-18594

CVE Database · CVE-2017-18594

CVE-2017-18594

· N/AModified

CVSS v3.1

N/A

EPSS

3.16%

Published

Aug 28, 2019

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.

Weaknesses (CWE)

CWE-415

Affected Products (1)

nmap · nmapvulnerable

References (16)

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html

https://github.com/AMatchandaHaystack/Research/blob/master/Nmap%26libsshDF

Third Party Advisory

https://github.com/nmap/nmap/commit/350bbe0597d37ad67abe5fef8fba984707b4e9ad

PatchThird Party Advisory

https://github.com/nmap/nmap/issues/1077

PatchThird Party Advisory

https://github.com/nmap/nmap/issues/1227

ExploitThird Party Advisory

https://seclists.org/nmap-announce/2019/0

KEV Catalog EPSS Scores Vendors All CVEs