nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading n character to ssh-brute.nse or ssh-auth-methods.nse.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nmap | Nmap | 7.70 (including) | 7.70 (including) |
| Nmap | Ubuntu | bionic | * |
| Nmap | Ubuntu | disco | * |
| Nmap | Ubuntu | precise/esm | * |
| Nmap | Ubuntu | trusty | * |
| Nmap | Ubuntu | upstream | * |
| Nmap | Ubuntu | xenial | * |