https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 16:50:21 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-72712 <p>Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.</p> <p>Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-72712 https://vulnerability.circl.lu/vuln/ghsa-7j7x-fg87-hwwg <p>Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.</p> <p>Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.</p> https://vulnerability.circl.lu/vuln/ghsa-7j7x-fg87-hwwg https://vulnerability.circl.lu/vuln/msrc_cve-2026-72712 msrc_CVE-2026-72712 https://vulnerability.circl.lu/vuln/msrc_cve-2026-72712 https://vulnerability.circl.lu/vuln/oesa-2026-3679 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: nmap</p> <p>Nmap (&amp;amp;quot;Network Mapper&amp;amp;quot;) is a free and open source (license) utility for network discovery and security \ auditing. It was designed to rapidly scan large networks, but works fine against single hosts. Security Fix(es):</p> <p>Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.(CVE-2026-72712)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: nmap</p> <p>Nmap (&amp;amp;quot;Network Mapper&amp;amp;quot;) is a free and open source (license) utility for network discovery and security \ auditing. It was designed to rapidly scan large networks, but works fine against single hosts. Security Fix(es):</p> <p>Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.(CVE-2026-72712)</p> https://vulnerability.circl.lu/vuln/oesa-2026-3679 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-72712 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: nmap, Ubuntu:16.04:LTS: nmap, Ubuntu:18.04:LTS: nmap, Ubuntu:20.04:LTS: nmap, Ubuntu:22.04:LTS: nmap, Ubuntu:24.04:LTS: nmap, Ubuntu:26.04:LTS: nmap</p> <p>Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: nmap, Ubuntu:16.04:LTS: nmap, Ubuntu:18.04:LTS: nmap, Ubuntu:20.04:LTS: nmap, Ubuntu:22.04:LTS: nmap, Ubuntu:24.04:LTS: nmap, Ubuntu:26.04:LTS: nmap</p> <p>Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-72712