CVE-2017-18594

Published: Aug 29, 2019Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.

Affected (1)

Products: Nmap: Nmap

Nmap

1 product

Nmap

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nmap Nmap	Version 7.70

Related CWEs

CWE-415

Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

References (16)

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html

Source: cve@mitre.org

https://github.com/AMatchandaHaystack/Research/blob/master/Nmap%26libsshDF

Source: cve@mitre.org

Third Party Advisory

https://github.com/nmap/nmap/commit/350bbe0597d37ad67abe5fef8fba984707b4e9ad

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/nmap/nmap/issues/1077

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/nmap/nmap/issues/1227

Source: cve@mitre.org

ExploitThird Party Advisory

https://seclists.org/nmap-announce/2019/0

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://seclists.org/nmap-dev/2018/q2/45

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html