Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-72712 →

DEBIAN-CVE-2026-72712

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a c...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 nmap

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 nmap

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 nmap

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org