https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:46:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-08979 bdu:2026-08979 https://cve.radiocsirt.org/vuln/bdu:2026-08979 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0841 certfr-2026-avi-0841 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0841 https://cve.radiocsirt.org/vuln/euvd-2026-331085 EUVD-2026-331085 https://cve.radiocsirt.org/vuln/euvd-2026-331085 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58058 <p>Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.</p> <p>Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-58058 https://cve.radiocsirt.org/vuln/ghsa-wxvj-hc4r-fq45 <p>Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.</p> <p>Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.</p> https://cve.radiocsirt.org/vuln/ghsa-wxvj-hc4r-fq45 https://cve.radiocsirt.org/vuln/msrc_cve-2026-58058 msrc_CVE-2026-58058 https://cve.radiocsirt.org/vuln/msrc_cve-2026-58058 https://cve.radiocsirt.org/vuln/oesa-2026-2955 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: nmap</p> <p>Nmap (&amp;amp;quot;Network Mapper&amp;amp;quot;) is a free and open source (license) utility for network discovery and security \ auditing. It was designed to rapidly scan large networks, but works fine against single hosts. Security Fix(es):</p> <p>Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.(CVE-2026-58058)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: nmap</p> <p>Nmap (&amp;amp;quot;Network Mapper&amp;amp;quot;) is a free and open source (license) utility for network discovery and security \ auditing. It was designed to rapidly scan large networks, but works fine against single hosts. Security Fix(es):</p> <p>Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.(CVE-2026-58058)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2955 https://cve.radiocsirt.org/vuln/suse-su-2026:22739-1 <p>Security update for nmap</p> <p>Security update for nmap</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22739-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-58058 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: nmap, Ubuntu:16.04:LTS: nmap, Ubuntu:18.04:LTS: nmap, Ubuntu:20.04:LTS: nmap, Ubuntu:22.04:LTS: nmap, Ubuntu:24.04:LTS: nmap, Ubuntu:25.10: nmap, Ubuntu:26.04:LTS: nmap</p> <p>Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: nmap, Ubuntu:16.04:LTS: nmap, Ubuntu:18.04:LTS: nmap, Ubuntu:20.04:LTS: nmap, Ubuntu:22.04:LTS: nmap, Ubuntu:24.04:LTS: nmap, Ubuntu:25.10: nmap, Ubuntu:26.04:LTS: nmap</p> <p>Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-58058 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2098 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in nmap ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in nmap ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2098