CVE-2018-25282 | BDVDB-2026-329059 Detail

Description#

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import functionality to cause the program to consume excessive system resources and crash.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-04-26Record published in the CVE List.
2. Version 22026-04-27Most recent update recorded in the CVE List.