← Vulnerability feed

Vulnerability record · CVE-2017-18594 · published 29 August 2019

CVE-2017-18594: Nmap double free vulnerability

Nmap · Nmap

nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.

7.5 CVSS 3.0 High EPSS 3.2% · top 12.5% CWE-415 · Double free
7.5CVSS 3.0 base score, v2 5.0
3.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
16References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html
https://github.com/AMatchandaHaystack/Research/blob/master/Nmap%26libsshDF Third Party Advisory
https://github.com/nmap/nmap/commit/350bbe0597d37ad67abe5fef8fba984707b4e9ad PatchThird Party Advisory
https://github.com/nmap/nmap/issues/1077 PatchThird Party Advisory
https://github.com/nmap/nmap/issues/1227 ExploitThird Party Advisory
https://seclists.org/nmap-announce/2019/0 Mailing ListThird Party Advisory
https://seclists.org/nmap-dev/2018/q2/45 Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html
https://github.com/AMatchandaHaystack/Research/blob/master/Nmap%26libsshDF Third Party Advisory
https://github.com/nmap/nmap/commit/350bbe0597d37ad67abe5fef8fba984707b4e9ad PatchThird Party Advisory
https://github.com/nmap/nmap/issues/1077 PatchThird Party Advisory
https://github.com/nmap/nmap/issues/1227 ExploitThird Party Advisory
https://seclists.org/nmap-announce/2019/0 Mailing ListThird Party Advisory
https://seclists.org/nmap-dev/2018/q2/45 Mailing ListThird Party Advisory

Track CVE-2017-18594 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2018-15173Nmap vulnerabilityNmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption and application crash) via a …EPSS 6.1%6.9CVE-2026-58058Nmap vulnerabilityNmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the …EPSS 1.5%6.8CVE-2013-4885Nmap vulnerabilityThe http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily…EPSS 7.2%5.7CVE-2018-1000161Nmap path traversal vulnerabilitynmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch tha…EPSS 1.0%9.8CVE-2026-33824Double free in Windows IKE Extension enables remote code executionA double free flaw (CWE-415) exists in the Windows IKE Extension, reachable over the network by an unauthenticated attacker. Successful exploitation …KEVEPSS 1.6%analysed7.0CVE-2025-62215Windows Kernel race condition and double free privilege escalationA race condition combined with a double free in the Windows Kernel lets a locally authenticated attacker corrupt kernel memory and elevate privileges…KEVEPSS 6.0%analysed8.8CVE-2014-0502Adobe Flash Player Double Free Enables Remote Code ExecutionAdobe Flash Player, Adobe AIR, and the AIR SDK contain a double free vulnerability (CWE-415) that allows remote attackers to execute arbitrary code. …KEVEPSS 25%analysed8.8CVE-2018-4990Adobe Acrobat and Reader double free allows code executionAdobe Acrobat and Reader contain a double free (CWE-415) in versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and e…KEVEPSS 36%analysed

Source: NIST National Vulnerability Database (record CVE-2017-18594), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.