Veracode Vulnerability DatabaseVERACODE:25252

HistoryMay 10, 2020 - 11:22 p.m.

Denial Of Service (DoS)

2020-05-1023:22:06

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.023 Low

EPSS

Percentile

89.7%

JSON

Nmap is vulnerable to Denial of Service (DoS). When the -sV option is used, it allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted TCP-based service.

CPENameOperatorVersion
nmap:3.7eq7.60-r2
nmap:3.7eq7.60-r2

CPE	Name	Operator	Version
	nmap:3.7	eq	7.60-r2
	nmap:3.7	eq	7.60-r2

References

code610.blogspot.com/2018/07/crashing-nmap-760.html

code610.blogspot.com/2018/07/crashing-nmap-770.html

lists.opensuse.org/opensuse-security-announce/2019-05/msg00067.html

lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html

lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html

security.netapp.com/advisory/ntap-20200827-0004/

0.023 Low

EPSS

Percentile

89.7%

JSON

Related for VERACODE:25252