PT-2026-35252 · Undefined · Undefined

CVE-2018-25282 · Publicado 2026-04-26 · Atualizado 2026-04-26

NVD

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import functionality to cause the program to consume excessive system resources and crash.

Correção

Uncontrolled Recursion

Enumeração de Fraquezas

CWE-674

Identificadores relacionados

CVE-2018-25282

Produtos afetados

Undefined

Referências · 4

• https://vulncheck.com/advisories/nmap-denial-of-service-via-xml-entity-expansion · Nota
• https://nmap.org/dist/nmap-7.70-setup.exe · Nota
• https://exploit-db.com/exploits/45357 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-25282 · Nota de Segurança