nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH     connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.
    (CVE-2017-18594)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH
    connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.
    (CVE-2017-18594)

  - Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service
    (stack consumption and application crash) via a crafted TCP-based service. (CVE-2018-15173)

This update for nmap fixes the following issues :

Security issue fixed :

CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. (bsc#1148742)

Non-security issue fixed :

Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173. (bsc#1135350)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the nmap package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - nse_libssh2.cc in Nmap 7.70 is subject to a denial of     service condition due to a double free when an SSH     connection fails, as demonstrated by a leading \n     character to ssh-brute.nse or     ssh-auth-methods.nse.(CVE-2017-18594)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the nmap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - nse_libssh2.cc in Nmap 7.70 is subject to a denial of     service condition due to a double free when an SSH     connection fails, as demonstrated by a leading \n     character to ssh-brute.nse or     ssh-auth-methods.nse.(CVE-2017-18594)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for nmap fixes the following issues :

Security issue fixed :

  - CVE-2017-18594: Fixed a denial of service condition due     to a double free when an SSH connection fails.
    (bsc#1148742)

Non-security issue fixed :

  - Fixed a regression in the version scanner caused, by the     fix for CVE-2018-15173. (bsc#1135350)

This update was imported from the SUSE:SLE-15:Update update project.

This update for nmap fixes the following issues :

Security issue fixed :

CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. (bsc#1148742)

Non-security issue fixed: Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173. (bsc#1135350)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
254192	Linux Distros Unpatched Vulnerability : CVE-2017-18594	Nessus	Misc.	high
424204	Alpine: multiple nmap packages: security update to 7.80-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
424204	Alpine: multiple nmap packages: security update to 7.80-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
405779	Alpine: nmap: security update to 7.70-r4	Tenable Cloud Security	Alpine Linux Local Security Checks	high
405779	Alpine: nmap: security update to 7.70-r4	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
405778	Alpine: nmap: security update to 7.70-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	high
405778	Alpine: nmap: security update to 7.70-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
405777	Alpine: nmap: security update to 7.60-r3	Tenable Cloud Security	Alpine Linux Local Security Checks	high
405777	Alpine: nmap: security update to 7.60-r3	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
138248	SUSE SLED15 / SLES15 Security Update : nmap (SUSE-SU-2019:2425-2)	Nessus	SuSE Local Security Checks	high
131515	EulerOS Virtualization for ARM 64 3.0.3.0 : nmap (EulerOS-SA-2019-2350)	Nessus	Huawei Local Security Checks	high
129444	EulerOS 2.0 SP8 : nmap (EulerOS-SA-2019-2085)	Nessus	Huawei Local Security Checks	high
129399	openSUSE Security Update : nmap (openSUSE-2019-2200)	Nessus	SuSE Local Security Checks	high
129397	openSUSE Security Update : nmap (openSUSE-2019-2198)	Nessus	SuSE Local Security Checks	high
129158	SUSE SLED15 / SLES15 Security Update : nmap (SUSE-SU-2019:2425-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2017-18594

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high