Suggestions search

All statuses

Filter by:

With package: asnmap

Found 2 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2026-72712

6.9 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): Active (A)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Active (A)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 2 weeks, 4 days ago Activity log

Created suggestion 2 weeks, 4 days ago

Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.

References

Product Repository product
GitHub Issue issue-tracking
Patch Commit patch
https://www.vulncheck.com/advisories/nmap-denial-of-service-via-zero-length-tcp… third-party-advisory

Affected products

Nmap

=<7.99

Matching in nixpkgs

pkgs.nmap

Free and open source utility for network discovery and security auditing

nixos-unstable 7.99
- nixpkgs-unstable 7.99
- nixos-unstable-small 7.99
nixos-26.05 7.99
- nixos-26.05-small 7.99
- nixpkgs-26.05-darwin 7.99

pkgs.asnmap

Tool to gather network ranges using ASN information

nixos-unstable 1.1.1
- nixpkgs-unstable 1.1.1
- nixos-unstable-small 1.1.1
nixos-26.05 1.1.1
- nixos-26.05-small 1.1.1
- nixpkgs-26.05-darwin 1.1.1

pkgs.genmap

Ultra-fast computation of genome mappability

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0
nixos-26.05 1.3.0
- nixos-26.05-small 1.3.0
- nixpkgs-26.05-darwin 1.3.0

pkgs.zenmap

Official nmap Security Scanner GUI

nixos-unstable 7.99
- nixpkgs-unstable 7.99
- nixos-unstable-small 7.99
nixos-26.05 7.99
- nixos-26.05-small 7.99
- nixpkgs-26.05-darwin 7.99

pkgs.nmap-parse

Command line nmap XML parser

nixos-unstable 0-unstable-2022-09-26
- nixpkgs-unstable 0-unstable-2022-09-26
- nixos-unstable-small 0-unstable-2022-09-26
nixos-26.05 0-unstable-2022-09-26
- nixos-26.05-small 0-unstable-2022-09-26
- nixpkgs-26.05-darwin 0-unstable-2022-09-26

pkgs.nmap-formatter

Tool that allows you to convert nmap output

nixos-unstable 3.1.3
- nixpkgs-unstable 3.1.3
- nixos-unstable-small 3.1.4
nixos-26.05 3.1.3
- nixos-26.05-small 3.1.3
- nixpkgs-26.05-darwin 3.1.3

pkgs.python313Packages.chainmap

Backport/clone of ChainMap

nixos-unstable 1.0.3
- nixpkgs-unstable 1.0.3
- nixos-unstable-small 1.0.3
nixos-26.05 1.0.3
- nixos-26.05-small 1.0.3
- nixpkgs-26.05-darwin 1.0.3

pkgs.python314Packages.chainmap

Backport/clone of ChainMap

nixos-unstable 1.0.3
- nixpkgs-unstable 1.0.3
- nixos-unstable-small 1.0.3
nixos-26.05 1.0.3
- nixos-26.05-small 1.0.3
- nixpkgs-26.05-darwin 1.0.3

pkgs.coqPackages.mathcomp-finmap

Finset and finmap library

nixos-unstable 2.2.2
- nixpkgs-unstable 2.2.2
- nixos-unstable-small 2.2.2
nixos-26.05 2.2.2
- nixos-26.05-small 2.2.2
- nixpkgs-26.05-darwin 2.2.2

pkgs.python313Packages.nmapthon2

Python library to automate nmap

nixos-unstable 0.1.5
- nixpkgs-unstable 0.1.5
- nixos-unstable-small 0.1.5
nixos-26.05 0.1.5
- nixos-26.05-small 0.1.5
- nixpkgs-26.05-darwin 0.1.5

pkgs.python314Packages.nmapthon2

Python library to automate nmap

nixos-unstable 0.1.5
- nixpkgs-unstable 0.1.5
- nixos-unstable-small 0.1.5
nixos-26.05 0.1.5
- nixos-26.05-small 0.1.5
- nixpkgs-26.05-darwin 0.1.5

pkgs.rocqPackages.mathcomp-finmap

Finset and finmap library

nixos-unstable 2.2.2
- nixpkgs-unstable 2.2.2
- nixos-unstable-small 2.2.2
nixos-26.05 2.2.2
- nixos-26.05-small 2.2.2
- nixpkgs-26.05-darwin 2.2.2

pkgs.python313Packages.python-nmap

Python library which helps in using nmap

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1
nixos-26.05 0.7.1
- nixos-26.05-small 0.7.1
- nixpkgs-26.05-darwin 0.7.1

pkgs.python314Packages.python-nmap

Python library which helps in using nmap

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1
nixos-26.05 0.7.1
- nixos-26.05-small 0.7.1
- nixpkgs-26.05-darwin 0.7.1

pkgs.python313Packages.dragonmapper

Identification and conversion functions for Chinese text processing

nixos-unstable 0.3.0
- nixpkgs-unstable 0.3.0
- nixos-unstable-small 0.3.0
nixos-26.05 0.3.0
- nixos-26.05-small 0.3.0
- nixpkgs-26.05-darwin 0.3.0

pkgs.python313Packages.python3-nmap

Library which helps in using nmap port scanner

nixos-unstable 1.9.2
- nixpkgs-unstable 1.9.2
- nixos-unstable-small 1.9.2
nixos-26.05 1.9.2
- nixos-26.05-small 1.9.2
- nixpkgs-26.05-darwin 1.9.2

pkgs.python314Packages.dragonmapper

Identification and conversion functions for Chinese text processing

nixos-unstable 0.3.0
- nixpkgs-unstable 0.3.0
- nixos-unstable-small 0.3.0
nixos-26.05 0.3.0
- nixos-26.05-small 0.3.0
- nixpkgs-26.05-darwin 0.3.0

pkgs.python314Packages.python3-nmap

Library which helps in using nmap port scanner

nixos-unstable 1.9.2
- nixpkgs-unstable 1.9.2
- nixos-unstable-small 1.9.2
nixos-26.05 1.9.2
- nixos-26.05-small 1.9.2
- nixpkgs-26.05-darwin 1.9.2

pkgs.python313Packages.deep-chainmap

Recursive subclass of ChainMap

nixos-unstable 0.2.0
- nixpkgs-unstable 0.2.0
- nixos-unstable-small 0.2.0
nixos-26.05 0.1.3
- nixos-26.05-small 0.1.3
- nixpkgs-26.05-darwin 0.1.3

pkgs.python314Packages.deep-chainmap

Recursive subclass of ChainMap

nixos-unstable 0.2.0
- nixpkgs-unstable 0.2.0
- nixos-unstable-small 0.2.0
nixos-26.05 0.1.3
- nixos-26.05-small 0.1.3
- nixpkgs-26.05-darwin 0.1.3

pkgs.python313Packages.python-libnmap

Library to run nmap scans, parse and diff scan results

nixos-unstable 0.7.3
- nixpkgs-unstable 0.7.3
- nixos-unstable-small 0.7.3
nixos-26.05 0.7.3
- nixos-26.05-small 0.7.3
- nixpkgs-26.05-darwin 0.7.3

pkgs.python314Packages.python-libnmap

Library to run nmap scans, parse and diff scan results

nixos-unstable 0.7.3
- nixpkgs-unstable 0.7.3
- nixos-unstable-small 0.7.3
nixos-26.05 0.7.3
- nixos-26.05-small 0.7.3
- nixpkgs-26.05-darwin 0.7.3

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>
@jbedo Justin Bedő <cu@cua0.org>
@fpletz Franz Pletz <fpletz@fnordicwalking.de>
@thoughtpolice Austin Seipp <aseipp@pobox.com>
@rehno-lindeque Rehno Lindeque <rehno.lindeque+code@gmail.com>
@ShamrockLee Yueh-Shun Li <shamrocklee@posteo.net>
@dvaerum Dennis Værum <nixpkgs-maintainer@varum.dk>
@mymindstorm Brendan Early <mymindstorm@evermiss.net>

Untriaged

Permalink CVE-2026-58058

6.9 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): Low (L)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): Low (L)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): Low (L)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 2 months ago Activity log

Created suggestion 2 months ago

Nmap - Integer Underflow in IPv6 Extension Header Parsing

Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.