XML Injection Vulnerability in python-libnmap
Summary
CVE-2019-1010017: libnmap < v0.6.3 is affected by: XML Injection. Affects python-libnmap across 2 version ranges.
< 0.7.2-1
< 0ed5e37133cd069d5e509ba74e54abc01adc07b0
Fixed in 0.7.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
python-libnmap is a Python library that provides a convenient interface for interacting with Nmap, a powerful network scanning tool. It allows users to parse and manipulate Nmap XML output. However, versions prior to 0.6.3 are vulnerable to XML Injection attacks, which can lead to a denial of service (DoS) by consuming excessive resources. The vulnerability lies in the XML parsing component of the library.
Vulnerability Detail
The XML Injection vulnerability in python-libnmap allows an attacker to inject specially crafted XML payloads, which can cause the library to consume excessive resources, resulting in a DoS condition. By manipulating the XML input, an attacker can exploit this vulnerability to exhaust system resources, potentially leading to service disruption or system unavailability. The attack vector for this vulnerability is a specially crafted XML payload.
How To Fix
Minimum fixed version
0.7.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade python-libnmapTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is strongly advised to upgrade to the fixed version of python-libnmap to mitigate the risk of exploitation.
Conclusion
The XML Injection vulnerability in python-libnmap can lead to a denial of service (DoS) condition by consuming excessive system resources. It is crucial to upgrade to python-libnmap version 0.6.3 or later to mitigate the risk of exploitation. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for python-libnmap →
FAQ
The vulnerability can lead to a denial of service (DoS) condition by consuming excessive system resources, potentially causing service disruption or system unavailability.
The attack vector for this vulnerability is a specially crafted XML payload that is processed by the python-libnmap library.
No, only versions prior to 0.6.3 are affected. It is recommended to upgrade to version 0.6.3 or later to mitigate the vulnerability.
Yes, the vulnerability has been fixed in python-libnmap version 0.7.2-1. It is advised to upgrade to this version or later to address the vulnerability.
No, there is no known workaround for this vulnerability. Upgrading to the fixed version is the recommended solution.
Related vulnerabilities
Recent vulnerabilities recorded for python-libnmap.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
