Skip to content

Product

redhat/nmap vulnerabilities

3 published CVES affecting redhat/nmap, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0

Latest redhat/nmap CVEs

Newest publication first

  1. CVE-2026-72712 Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet

    Published
    MediumCVSS 6.9 EPSS 0.50%

    Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packe...

  2. CVE-2026-58058 Nmap - Integer Underflow in IPv6 Extension Header Parsing

    Published
    MediumCVSS 6.9 EPSS 1.5%

    Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path atta...

  3. CVE-2018-25282 Nmap 7.70 Denial of Service via XML Entity Expansion

    Published
    MediumCVSS 6.9 EPSS 0.12%

    Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.