AZL-91391
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-91391.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-91391
- Upstream
- Published
- 2026-06-28T02:16:33Z
- Modified
- 2026-08-29T05:27:27Z
- Summary
- CVE-2026-58058 affecting package nmap for versions less than 7.95-4
- Details
-
Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6getdata_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.
- References