CVE-2017-18594

CVE-2017-18594 describes a denial-of-service vulnerability affecting Nmap 7.70, specifically within its nse_libssh2.cc component. This flaw, a double free error, occurs when an SSH connection fails, particularly when a leading newline character is used with scripts like ssh-brute.nse or ssh-auth-methods.nse. The vulnerability carries a CVSS v3 score of 7.5 (HIGH), indicating a significant risk. It can be exploited remotely with low attack complexity and no user interaction, leading to a complete denial of service (availability impact). Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or concern.