CVE-2026-72712: Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet
Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parseoptions() function in nselib/packet.lua to allocate objects in an infinite loop, causing an out-of-memory condition that results in application crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72712?
The severity of CVE-2026-72712 is rated as medium with a score of 6.5.
What does CVE-2026-72712 affect?
CVE-2026-72712 affects Nmap versions up to and including 7.99.
What type of vulnerability is CVE-2026-72712?
CVE-2026-72712 is a denial of service vulnerability.
How do I fix CVE-2026-72712?
To fix CVE-2026-72712, upgrade to a version of Nmap that is higher than 7.99.
What causes the vulnerability in CVE-2026-72712?
CVE-2026-72712 is caused by a crafted packet containing a zero-length TCP option that crashes the application.