{
  "document": {
    "aggregate_severity": {
      "text": "Medium"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/cloudlinux7els/vex/2026/cve-2026-58058-els_os-cloudlinux7els.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-11-06T14:27:41Z",
      "generator": {
        "date": "2026-11-06T14:27:41Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CVE-2026-58058-ELS_OS-CLOUDLINUX7ELS",
      "initial_release_date": "2026-06-28T02:16:00Z",
      "revision_history": [
        {
          "date": "2026-06-28T02:16:00Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-06T14:27:41Z",
          "number": "2",
          "summary": "Official Publication"
        }
      ],
      "status": "final",
      "version": "2"
    },
    "title": "Security update on CVE-2026-58058"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "CloudLinux 7",
                "product": {
                  "name": "CloudLinux 7",
                  "product_id": "CloudLinux-7",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:cloudlinux:cloudlinux:7:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "CloudLinux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nmap-2:6.40-19.el7.x86_64",
                "product": {
                  "name": "nmap-2:6.40-19.el7.x86_64",
                  "product_id": "nmap-2:6.40-19.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/nmap@6.40-19.el7?arch=x86_64&epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nmap-ncat-2:6.40-19.el7.x86_64",
                "product": {
                  "name": "nmap-ncat-2:6.40-19.el7.x86_64",
                  "product_id": "nmap-ncat-2:6.40-19.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/nmap-ncat@6.40-19.el7?arch=x86_64&epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nmap-2:6.40-19.el7.i686",
                "product": {
                  "name": "nmap-2:6.40-19.el7.i686",
                  "product_id": "nmap-2:6.40-19.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/nmap@6.40-19.el7?arch=i686&epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nmap-ncat-2:6.40-19.el7.i686",
                "product": {
                  "name": "nmap-ncat-2:6.40-19.el7.i686",
                  "product_id": "nmap-ncat-2:6.40-19.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/nmap-ncat@6.40-19.el7?arch=i686&epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nmap-frontend-2:6.40-19.el7.noarch",
                "product": {
                  "name": "nmap-frontend-2:6.40-19.el7.noarch",
                  "product_id": "nmap-frontend-2:6.40-19.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/nmap-frontend@6.40-19.el7?arch=noarch&epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Cloud Linux Software, Inc."
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nmap-2:6.40-19.el7.tuxcare.els2.x86_64",
                "product": {
                  "name": "nmap-2:6.40-19.el7.tuxcare.els2.x86_64",
                  "product_id": "nmap-2:6.40-19.el7.tuxcare.els2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/nmap@6.40-19.el7.tuxcare.els2?arch=x86_64&epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nmap-ncat-2:6.40-19.el7.tuxcare.els2.x86_64",
                "product": {
                  "name": "nmap-ncat-2:6.40-19.el7.tuxcare.els2.x86_64",
                  "product_id": "nmap-ncat-2:6.40-19.el7.tuxcare.els2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/nmap-ncat@6.40-19.el7.tuxcare.els2?arch=x86_64&epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nmap-2:6.40-19.el7.tuxcare.els2.i686",
                "product": {
                  "name": "nmap-2:6.40-19.el7.tuxcare.els2.i686",
                  "product_id": "nmap-2:6.40-19.el7.tuxcare.els2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/nmap@6.40-19.el7.tuxcare.els2?arch=i686&epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nmap-ncat-2:6.40-19.el7.tuxcare.els2.i686",
                "product": {
                  "name": "nmap-ncat-2:6.40-19.el7.tuxcare.els2.i686",
                  "product_id": "nmap-ncat-2:6.40-19.el7.tuxcare.els2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/nmap-ncat@6.40-19.el7.tuxcare.els2?arch=i686&epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nmap-frontend-2:6.40-19.el7.tuxcare.els2.noarch",
                "product": {
                  "name": "nmap-frontend-2:6.40-19.el7.tuxcare.els2.noarch",
                  "product_id": "nmap-frontend-2:6.40-19.el7.tuxcare.els2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/nmap-frontend@6.40-19.el7.tuxcare.els2?arch=noarch&epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "CloudLinux"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nmap-2:6.40-19.el7.tuxcare.els2.x86_64 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:nmap-2:6.40-19.el7.tuxcare.els2.x86_64"
        },
        "product_reference": "nmap-2:6.40-19.el7.tuxcare.els2.x86_64",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nmap-2:6.40-19.el7.x86_64 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:nmap-2:6.40-19.el7.x86_64"
        },
        "product_reference": "nmap-2:6.40-19.el7.x86_64",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nmap-2:6.40-19.el7.tuxcare.els2.i686 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:nmap-2:6.40-19.el7.tuxcare.els2.i686"
        },
        "product_reference": "nmap-2:6.40-19.el7.tuxcare.els2.i686",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nmap-2:6.40-19.el7.i686 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:nmap-2:6.40-19.el7.i686"
        },
        "product_reference": "nmap-2:6.40-19.el7.i686",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nmap-ncat-2:6.40-19.el7.tuxcare.els2.i686 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:nmap-ncat-2:6.40-19.el7.tuxcare.els2.i686"
        },
        "product_reference": "nmap-ncat-2:6.40-19.el7.tuxcare.els2.i686",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nmap-ncat-2:6.40-19.el7.i686 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:nmap-ncat-2:6.40-19.el7.i686"
        },
        "product_reference": "nmap-ncat-2:6.40-19.el7.i686",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nmap-ncat-2:6.40-19.el7.tuxcare.els2.x86_64 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:nmap-ncat-2:6.40-19.el7.tuxcare.els2.x86_64"
        },
        "product_reference": "nmap-ncat-2:6.40-19.el7.tuxcare.els2.x86_64",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nmap-ncat-2:6.40-19.el7.x86_64 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:nmap-ncat-2:6.40-19.el7.x86_64"
        },
        "product_reference": "nmap-ncat-2:6.40-19.el7.x86_64",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nmap-frontend-2:6.40-19.el7.tuxcare.els2.noarch as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:nmap-frontend-2:6.40-19.el7.tuxcare.els2.noarch"
        },
        "product_reference": "nmap-frontend-2:6.40-19.el7.tuxcare.els2.noarch",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nmap-frontend-2:6.40-19.el7.noarch as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:nmap-frontend-2:6.40-19.el7.noarch"
        },
        "product_reference": "nmap-frontend-2:6.40-19.el7.noarch",
        "relates_to_product_reference": "CloudLinux-7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-58058",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "notes": [
        {
          "category": "description",
          "text": "Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "known_affected": [
          "CloudLinux-7:nmap-2:6.40-19.el7.i686",
          "CloudLinux-7:nmap-2:6.40-19.el7.tuxcare.els2.i686",
          "CloudLinux-7:nmap-2:6.40-19.el7.tuxcare.els2.x86_64",
          "CloudLinux-7:nmap-2:6.40-19.el7.x86_64",
          "CloudLinux-7:nmap-frontend-2:6.40-19.el7.noarch",
          "CloudLinux-7:nmap-frontend-2:6.40-19.el7.tuxcare.els2.noarch",
          "CloudLinux-7:nmap-ncat-2:6.40-19.el7.i686",
          "CloudLinux-7:nmap-ncat-2:6.40-19.el7.tuxcare.els2.i686",
          "CloudLinux-7:nmap-ncat-2:6.40-19.el7.tuxcare.els2.x86_64",
          "CloudLinux-7:nmap-ncat-2:6.40-19.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-58058"
        },
        {
          "category": "external",
          "summary": "https://github.com/bikini/exploitarium/tree/main/nmap-ipv6-extlen-wrap-poc",
          "url": "https://github.com/bikini/exploitarium/tree/main/nmap-ipv6-extlen-wrap-poc"
        },
        {
          "category": "external",
          "summary": "https://github.com/nmap/nmap/commit/bb6754e76bb1686315008e1aa1c40202a513fb83",
          "url": "https://github.com/nmap/nmap/commit/bb6754e76bb1686315008e1aa1c40202a513fb83"
        },
        {
          "category": "external",
          "summary": "https://nmap.org/changelog.html",
          "url": "https://nmap.org/changelog.html"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/nmap-integer-underflow-in-ipv6-extension-header-parsing",
          "url": "https://www.vulncheck.com/advisories/nmap-integer-underflow-in-ipv6-extension-header-parsing"
        }
      ],
      "release_date": "2026-06-28T02:16:00Z",
      "remediations": [
        {
          "category": "no_fix_planned",
          "date": "2026-10-26T11:16:34.708038Z",
          "details": "CVE-2026-58058 only affects the host actively running Nmap and is triggered during operator‑initiated raw IPv6 scans, not on typical server/VM workloads that aren’t executing Nmap as a service. The flaw leads to out‑of‑bounds reads and a crash (availability impact only) with no confidentiality or integrity exposure, requiring a crafted IPv6 response from the scanned target or an on‑path adversary. Since it impacts only the ephemeral scanning process rather than resident services, the practical risk to managed enterprise systems is minimal and this issue can be safely deprioritized.",
          "product_ids": [
            "CloudLinux-7:nmap-2:6.40-19.el7.i686",
            "CloudLinux-7:nmap-2:6.40-19.el7.tuxcare.els2.i686",
            "CloudLinux-7:nmap-2:6.40-19.el7.tuxcare.els2.x86_64",
            "CloudLinux-7:nmap-2:6.40-19.el7.x86_64",
            "CloudLinux-7:nmap-frontend-2:6.40-19.el7.noarch",
            "CloudLinux-7:nmap-frontend-2:6.40-19.el7.tuxcare.els2.noarch",
            "CloudLinux-7:nmap-ncat-2:6.40-19.el7.i686",
            "CloudLinux-7:nmap-ncat-2:6.40-19.el7.tuxcare.els2.i686",
            "CloudLinux-7:nmap-ncat-2:6.40-19.el7.tuxcare.els2.x86_64",
            "CloudLinux-7:nmap-ncat-2:6.40-19.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CloudLinux-7:nmap-2:6.40-19.el7.i686",
            "CloudLinux-7:nmap-2:6.40-19.el7.tuxcare.els2.i686",
            "CloudLinux-7:nmap-2:6.40-19.el7.tuxcare.els2.x86_64",
            "CloudLinux-7:nmap-2:6.40-19.el7.x86_64",
            "CloudLinux-7:nmap-frontend-2:6.40-19.el7.noarch",
            "CloudLinux-7:nmap-frontend-2:6.40-19.el7.tuxcare.els2.noarch",
            "CloudLinux-7:nmap-ncat-2:6.40-19.el7.i686",
            "CloudLinux-7:nmap-ncat-2:6.40-19.el7.tuxcare.els2.i686",
            "CloudLinux-7:nmap-ncat-2:6.40-19.el7.tuxcare.els2.x86_64",
            "CloudLinux-7:nmap-ncat-2:6.40-19.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    }
  ]
}