https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T16:50:18.131854+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-72712 fkie_cve-2026-72712 2026-09-28T16:50:18.286439+00:00

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.

 https://vulnerability.circl.lu/vuln/ghsa-7j7x-fg87-hwwg GHSA-7j7x-fg87-hwwg 2026-09-28T16:50:18.286547+00:00

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.

 https://vulnerability.circl.lu/vuln/msrc_cve-2026-72712 msrc_CVE-2026-72712 — Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet 2026-09-28T16:50:18.286593+00:00 msrc_CVE-2026-72712 https://vulnerability.circl.lu/vuln/oesa-2026-3679 OESA-2026-3679 — nmap security update 2026-09-28T16:50:18.286629+00:00

Affected: openEuler:20.03-LTS-SP4: nmap

Nmap ("Network Mapper") is a free and open source (license) utility for network discovery and security \ auditing. It was designed to rapidly scan large networks, but works fine against single hosts. Security Fix(es):

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.(CVE-2026-72712)

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-72712 UBUNTU-CVE-2026-72712 2026-09-28T16:50:18.286679+00:00

Affected: Ubuntu:14.04:LTS: nmap, Ubuntu:16.04:LTS: nmap, Ubuntu:18.04:LTS: nmap, Ubuntu:20.04:LTS: nmap, Ubuntu:22.04:LTS: nmap, Ubuntu:24.04:LTS: nmap, Ubuntu:26.04:LTS: nmap

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.