Nmap new version past 7.70 due to CVE-2018-15173
Shashi Guruprasad <[email protected]> Tue, 28 Aug 2018 00:54:58 +0000
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi Fyodor, or Daniel Miller, Would it be possible to release a new version of nmap for fix CVE-2018-15173? Qualys is reporting this vulnerability in our system despite installing 7.70-1. I can build from source, but it will mean that I will need to do this all the time in the future⦠Thanks and regards, Shashi [GH#1147]<http://issues.nmap.org/1147>[GH#1108]<http://issues.nmap.org/1108> Reduced LibPCRE resource limits so that version detection can't use as much of the stack. Previously Nmap could crash when run on low-memory systems against target services which are intentionally or accidentally difficult to match. Someone assigned CVE-2018-15173 for this issue. [Daniel Miller] _______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/