Поиск уязвимостей
Количество 12
Количество 12
GHSA-wxvj-hc4r-fq45
Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.
CVE-2026-58058
Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.
CVE-2026-58058
Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.
CVE-2026-58058
Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.
CVE-2026-58058
Nmap - Integer Underflow in IPv6 Extension Header Parsing
CVE-2026-58058
Nmap through 7.99 does not keep the IPv6 extension-header walk within ...
SUSE-SU-2026:3340-1
Security update for nmap
SUSE-SU-2026:3333-1
Security update for nmap
BDU:2026-08979
Уязвимость функции ipv6_get_data_primitive() файла libnetutil/netutil.cc утилиты для сканирования сети Nmap, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260819-80-0069
Уязвимость nmap
ROS-20260819-73-0069
Уязвимость nmap
ALT-PU-2026-12302
ALT-PU-2026-12302: package `nmap` update to version 7.80-alt3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-wxvj-hc4r-fq45 Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans. | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-58058 Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans. | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-58058 Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans. | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-58058 Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans. | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-58058 Nmap - Integer Underflow in IPv6 Extension Header Parsing | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
| CVE-2026-58058 Nmap through 7.99 does not keep the IPv6 extension-header walk within ... | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
 | SUSE-SU-2026:3340-1 Security update for nmap | 1% Низкий | 3 месяца назад | |
| SUSE-SU-2026:3333-1 Security update for nmap | 1% Низкий | 3 месяца назад | |
 | BDU:2026-08979 Уязвимость функции ipv6_get_data_primitive() файла libnetutil/netutil.cc утилиты для сканирования сети Nmap, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 1% Низкий | 5 месяцев назад |
 | ROS-20260819-80-0069 Уязвимость nmap | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
| ROS-20260819-73-0069 Уязвимость nmap | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
| ALT-PU-2026-12302 ALT-PU-2026-12302: package `nmap` update to version 7.80-alt3 | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
Уязвимостей на страницу