CVE-2018-25282 in Nmapinfo

Summary

by MITRE • 04/27/2026

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import functionality to cause the program to consume excessive system resources and crash.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsible

VulnCheck

Reservation

04/26/2026

Disclosure

04/27/2026

Moderation

accepted

CPE

ready

Exploit

Download

EPSS

0.00017

KEV

no

Activities

very low

Sources

Do you need the next level of professionalism?

Upgrade your account now!