CVE-2018-15173

Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted TCP-based service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
VendorProductVersion
nmapnmap
𝑥
≤ 7.70
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
nmap
bullseye
unimportant
bookworm
unimportant
sid
unimportant
trixie
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
nmap
noble
not-affected
mantic
not-affected
lunar
not-affected
kinetic
not-affected
jammy
not-affected
impish
not-affected
hirsute
not-affected
groovy
not-affected
focal
not-affected
eoan
ignored
disco
ignored
cosmic
ignored
bionic
needed
xenial
needs-triage
trusty
needs-triage
References
http://code610.blogspot.com/2018/07/crashing-nmap-760.html
http://code610.blogspot.com/2018/07/crashing-nmap-770.html
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00067.html
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html
https://security.netapp.com/advisory/ntap-20200827-0004/
http://code610.blogspot.com/2018/07/crashing-nmap-760.html
http://code610.blogspot.com/2018/07/crashing-nmap-770.html
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00067.html
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html
https://security.netapp.com/advisory/ntap-20200827-0004/