« List of all CVEs

CVE-2017-18594

Published: 8/28/2019 Last updated: 8/5/2024 Reserved: 8/28/2019

nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (2)

conf-nmap nbd-tool

Products affected (1)

Product Vendor Version
n/a n/a <= 3.3.23.6.9

References (16)