From 0a0e9c443319cafe0fce0e2411af76328345fad5 Mon Sep 17 00:00:00 2001 From: dmiller Date: Mon, 13 Aug 2018 17:18:48 +0000 Subject: [PATCH] Changelog entry for #1147, #1108, CVE-2018-15173 --- CHANGELOG | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/CHANGELOG b/CHANGELOG index a0178b6f9..cbf8572f1 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,11 @@ #Nmap Changelog ($Id$); -*-text-*- +o [GH#1147][GH#1108] Reduced LibPCRE resource limits so that version detection + can't use as much of the stack. Previously Nmap could crash when run on + low-memory systems against target services which are intentionally or + accidentally difficult to match. Someone assigned CVE-2018-15173 for this + issue. [Daniel Miller] + o [NSE] Support for edns-client-subnet (ECS) in dns.lua has been improved by: - Using ECS code compliant with RFC 7871 [John Bond] - Properly trimming ECS address, as mandated by RFC 7871 [nnposter]