CVE-2019-1010017

Published: Jul 15, 2019Modified: Jun 17, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

libnmap < v0.6.3 is affected by: XML Injection. The impact is: Denial of service (DoS) by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload.

Affected (1)

Products: Libnmap: Libnmap

Libnmap

1 product

Libnmap

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Libnmap Libnmap	Before 0.6.3

Related CWEs

CWE-91

XML Injection (aka Blind XPath Injection)

The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.

References (2)

https://github.com/savon-noir/python-libnmap/issues/87

Source: josh@bress.net

ExploitThird Party Advisory

https://github.com/savon-noir/python-libnmap/issues/87

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.