CVE-2017-18594

HIGH

Nmap <7.70 - DoS

Title source: llm

Description

nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.

References (8)

[Third Party Advisory] https://github.com/AMatchandaHaystack/Research/blob/master/Nmap%26libsshDF

[Patch, Third Party Advisory] https://github.com/nmap/nmap/commit/350bbe0597d37ad67abe5fef8fba984707b4e9ad

[Patch, Third Party Advisory] https://github.com/nmap/nmap/issues/1077

[Exploit, Third Party Advisory] https://github.com/nmap/nmap/issues/1227

[Mailing List, Third Party Advisory] https://seclists.org/nmap-announce/2019/0

[Mailing List, Third Party Advisory] https://seclists.org/nmap-dev/2018/q2/45

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html

Scores

CVSS v3 7.5

EPSS 0.0117

EPSS Percentile 78.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-415

Status published

Affected Products (1)

nmap/nmap

Timeline

Published Aug 29, 2019

Tracked Since Feb 18, 2026