Описание
Security update for nmap
This update for nmap fixes the following issues:
Security issue fixed:
- CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. (bsc#1148742)
Non-security issue fixed:
- Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173. (bsc#1135350)
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.1
ncat-7.70-lp151.3.9.1
ndiff-7.70-lp151.3.9.1
nmap-7.70-lp151.3.9.1
nping-7.70-lp151.3.9.1
zenmap-7.70-lp151.3.9.1
Ссылки
- E-Mail link for openSUSE-SU-2019:2200-1
- SUSE Security Ratings
- SUSE Bug 1135350
- SUSE Bug 1148742
- SUSE CVE CVE-2017-18594 page
- SUSE CVE CVE-2018-15173 page
Описание
nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.
Затронутые продукты
openSUSE Leap 15.1:ncat-7.70-lp151.3.9.1
openSUSE Leap 15.1:ndiff-7.70-lp151.3.9.1
openSUSE Leap 15.1:nmap-7.70-lp151.3.9.1
openSUSE Leap 15.1:nping-7.70-lp151.3.9.1
Ссылки
- CVE-2017-18594
- SUSE Bug 1148742
Описание
Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted TCP-based service.
Затронутые продукты
openSUSE Leap 15.1:ncat-7.70-lp151.3.9.1
openSUSE Leap 15.1:ndiff-7.70-lp151.3.9.1
openSUSE Leap 15.1:nmap-7.70-lp151.3.9.1
openSUSE Leap 15.1:nping-7.70-lp151.3.9.1
Ссылки
- CVE-2018-15173
- SUSE Bug 1104139