Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3340-1

Опубликовано: 28 июл. 2026
Источник: suse-cvrf

Описание

Security update for nmap

This update for nmap fixes the following issue:

  • CVE-2026-58058: crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash (bsc#1269570).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP7
nmap-7.92-150600.9.3.1
SUSE Linux Enterprise Module for Package Hub 15 SP7
nping-7.92-150600.9.3.1

Ссылки

Описание

Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:nmap-7.92-150600.9.3.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:nping-7.92-150600.9.3.1
Ссылки