GCVE - cpe:2.3:a:nmap:nmap:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nmap:nmap:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Nmap (`765412fc-2cf3-593f-b684-e0e7ee0595d5`)
Product	Nmap (`a377a570-3333-523e-b4e7-b23e2691dee7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/nmap`	purl2cpe	2026-06-01 10:13:31.194548
`pkg:deb/ubuntu/nmap`	purl2cpe	2026-06-01 10:13:31.194552
`pkg:github/nmap/nmap`	purl2cpe	2026-06-01 10:13:31.194554
`pkg:gitlab/kalilinux/nmap`	purl2cpe	2026-06-01 10:13:31.194557
`pkg:gitlab/redhat/nmap`	purl2cpe	2026-06-01 10:13:31.194560
`pkg:rpm/centos/nmap`	purl2cpe	2026-06-01 10:13:31.194563
`pkg:rpm/fedora/nmap`	purl2cpe	2026-06-01 10:13:31.194566
`pkg:rpm/opensuse/nmap`	purl2cpe	2026-06-01 10:13:31.194568

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-58058`	vulnerable	2026-07-29 01:03:16.612999	Nmap - Integer Underflow in IPv6 Extension Header Parsing MEDIUM (6.5) Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans. Published: 2026-06-28T01:32:59.336Z Updated: 2026-06-29T14:53:48.365Z Open on db.gcve.eu Reference links https://github.com/bikini/exploitarium/tree/main/nmap-ipv6-extlen-wrap-poc https://github.com/nmap/nmap/commit/bb6754e76bb1686315008e1aa1c40202a513fb83 https://nmap.org/changelog.html https://www.vulncheck.com/advisories/nmap-integer-underflow-in-ipv6-extension-header-parsing	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15173`	vulnerable	2026-06-08 05:10:53.865144	Details available Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted TCP-based service. Published: 2018-08-08T00:00:00.000Z Updated: 2024-08-05T09:46:25.504Z Open on db.gcve.eu Reference links http://code610.blogspot.com/2018/07/crashing-nmap-770.html http://code610.blogspot.com/2018/07/crashing-nmap-760.html http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00067.html http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4885`	vulnerable	2026-06-08 05:04:50.075114	Details available The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences. Published: 2013-10-26T17:00:00.000Z Updated: 2024-08-06T16:59:40.513Z Open on db.gcve.eu Reference links https://www.trustwave.com/spiderlabs/advisories/TWSL2013-025.txt http://lists.opensuse.org/opensuse-updates/2013-10/msg00030.html http://lists.opensuse.org/opensuse-updates/2013-10/msg00035.html http://packetstormsecurity.com/files/122719/TWSL2013-025.txt http://nmap.org/changelog.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.