CyberRota Analysis
AI-GeneratedNmap versions up to 7.99 are vulnerable to a denial of service attack, where remote attackers can crash the application by sending a specially crafted packet with a zero-length TCP option. This exploit triggers an infinite loop in the Packet:parse_options() function, leading to an out-of-memory condition and subsequent application failure. Organizations using Nmap for network scanning and security assessments should prioritize patching this vulnerability to maintain service availability and prevent potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parse_options() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.