Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted TCP-based service.

The version of nmap installed on the remote host is prior to 6.40-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2333 advisory.

  - Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service     (stack consumption and application crash) via a crafted TCP-based service. (CVE-2018-15173)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the nmap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Nmap through 7.70, when the -sV option is used, allows     remote attackers to cause a denial of service (stack     consumption and application crash) via a crafted     TCP-based service.(CVE-2018-15173)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the nmap package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - Nmap through 7.70, when the -sV option is used, allows     remote attackers to cause a denial of service (stack     consumption and application crash) via a crafted     TCP-based service.(CVE-2018-15173)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for nmap fixes the following issues :

Security issue fixed :

CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. (bsc#1148742)

Non-security issue fixed :

Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173. (bsc#1135350)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the nmap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - Nmap through 7.70, when the -sV option is used, allows     remote attackers to cause a denial of service (stack     consumption and application crash) via a crafted     TCP-based service.(CVE-2018-15173)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for nmap fixes the following issues :

Security issue fixed :

  - CVE-2017-18594: Fixed a denial of service condition due     to a double free when an SSH connection fails.
    (bsc#1148742)

Non-security issue fixed :

  - Fixed a regression in the version scanner caused, by the     fix for CVE-2018-15173. (bsc#1135350)

This update was imported from the SUSE:SLE-15:Update update project.

This update for nmap fixes the following issues :

Fixed a regression in the version scanner, caused by the fix for CVE-2018-15173. (bsc#1135350)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for nmap fixes the following issues :

Security issue fixed :

CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. (bsc#1148742)

Non-security issue fixed: Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173. (bsc#1135350)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for nmap fixes the following issues :

Security issue fixed :

CVE-2018-15173: Fixed a remote denial of service attack via a crafted TCP-based service (bsc#1104139).

Non-security issue fixed: Add missing runtime dependency python-xml which prevented zenmap from starting (bsc#1133512).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for nmap fixes the following issues :

Security issue fixed :

  - CVE-2018-15173: Fixed a remote denial of service attack     via a crafted TCP-based service (bsc#1104139).

Non-security issue fixed :

  - Add missing runtime dependency python-xml which     prevented zenmap from starting (bsc#1133512).

This update was imported from the SUSE:SLE-15:Update update project.

This update for nmap fixes the following issues :

Security issue fixed :

CVE-2018-15173: Fixed a remote denial of service attack via a crafted TCP-based service (bsc#1104139).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for nmap fixes the following issues :

Security issue fixed :

  - CVE-2018-15173: Fixed remote denial of service via a     crafted TCP-based service (boo#1104139).

ID	Name	Product	Family	Severity
184284	Amazon Linux 2 : nmap (ALAS-2023-2333)	Nessus	Amazon Linux Local Security Checks	high
142339	EulerOS 2.0 SP2 : nmap (EulerOS-SA-2020-2373)	Nessus	Huawei Local Security Checks	high
140914	EulerOS 2.0 SP3 : nmap (EulerOS-SA-2020-2147)	Nessus	Huawei Local Security Checks	high
140349	EulerOS Virtualization for ARM 64 3.0.2.0 : nmap (EulerOS-SA-2020-1979)	Nessus	Huawei Local Security Checks	high
138248	SUSE SLED15 / SLES15 Security Update : nmap (SUSE-SU-2019:2425-2)	Nessus	SuSE Local Security Checks	high
138000	EulerOS Virtualization 3.0.6.0 : nmap (EulerOS-SA-2020-1781)	Nessus	Huawei Local Security Checks	high
137028	EulerOS 2.0 SP5 : nmap (EulerOS-SA-2020-1610)	Nessus	Huawei Local Security Checks	high
132835	EulerOS Virtualization for ARM 64 3.0.5.0 : nmap (EulerOS-SA-2020-1081)	Nessus	Huawei Local Security Checks	high
132611	EulerOS 2.0 SP8 : nmap (EulerOS-SA-2020-1018)	Nessus	Huawei Local Security Checks	high
129399	openSUSE Security Update : nmap (openSUSE-2019-2200)	Nessus	SuSE Local Security Checks	high
129397	openSUSE Security Update : nmap (openSUSE-2019-2198)	Nessus	SuSE Local Security Checks	high
129159	SUSE SLES12 Security Update : nmap (SUSE-SU-2019:2426-1)	Nessus	SuSE Local Security Checks	high
129158	SUSE SLED15 / SLES15 Security Update : nmap (SUSE-SU-2019:2425-1)	Nessus	SuSE Local Security Checks	high
126494	SUSE SLED15 / SLES15 Security Update : nmap (SUSE-SU-2019:1290-2)	Nessus	SuSE Local Security Checks	high
125533	openSUSE Security Update : nmap (openSUSE-2019-1462)	Nessus	SuSE Local Security Checks	high
125307	SUSE SLED15 / SLES15 Security Update : nmap (SUSE-SU-2019:1290-1)	Nessus	SuSE Local Security Checks	high
125281	SUSE SLES12 Security Update : nmap (SUSE-SU-2019:1286-1)	Nessus	SuSE Local Security Checks	high
125020	openSUSE Security Update : nmap (openSUSE-2019-1392)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2018-15173

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high