
Nmap Development mailing list archives
Nmap new version past 7.70 due to CVE-2018-15173
From: Shashi Guruprasad <sguruprasad () fortinet com>
Date: Tue, 28 Aug 2018 00:54:58 +0000
Hi Fyodor, or Daniel Miller, Would it be possible to release a new version of nmap for fix CVE-2018-15173? Qualys is reporting this vulnerability in our system despite installing 7.70-1. I can build from source, but it will mean that I will need to do this all the time in the future⦠Thanks and regards, Shashi [GH#1147]<http://issues.nmap.org/1147>[GH#1108]<http://issues.nmap.org/1108> Reduced LibPCRE resource limits so that version detection can't use as much of the stack. Previously Nmap could crash when run on low-memory systems against target services which are intentionally or accidentally difficult to match. Someone assigned CVE-2018-15173 for this issue. [Daniel Miller]
_______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/
Current thread:
- Nmap new version past 7.70 due to CVE-2018-15173 Shashi Guruprasad (Aug 27)
- Re: Nmap new version past 7.70 due to CVE-2018-15173 Fyodor (Aug 29)