Security update for nmap
This update for nmap fixes the following issues:
Security issue fixed:
- CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. (bsc#1148742)
Non-security issue fixed:
- Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173. (bsc#1135350)
This update was imported from the SUSE:SLE-15:Update update project.
-
Submitted by
Kristyna Streitova (kstreitova)
Fixed bugs
bnc#1135350
segmentation fault in nmap
bnc#1148742
VUL-0: CVE-2017-18594: nmap: nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse
