CVE-2017-18594
N/A
Published: August 28, 2019 at 11:50 PM UTC
Updated: June 17, 2026 at 01:13 AM UTC
1 product affected across 1 vendorNmap
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 3%
Description
nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (8)
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.htmlx_refsource_MISCThird Party Advisory
Source: [email protected]
https://github.com/AMatchandaHaystack/Research/blob/master/Nmap%26libsshDFx_refsource_MISCPatchThird Party Advisory
Source: [email protected]
https://github.com/nmap/nmap/commit/350bbe0597d37ad67abe5fef8fba984707b4e9adx_refsource_MISCPatchThird Party Advisory
Source: [email protected]
https://github.com/nmap/nmap/issues/1077x_refsource_MISCExploitThird Party Advisory
Source: [email protected]
https://github.com/nmap/nmap/issues/1227x_refsource_MISCMailing ListThird Party Advisory
Source: [email protected]
https://seclists.org/nmap-announce/2019/0x_refsource_MISCMailing ListThird Party Advisory
Source: [email protected]
https://seclists.org/nmap-dev/2018/q2/45Quick Info
StatusMODIFIED
CWE
CWE-415
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card