Skip to content

http-ntlm-info leads to abort #3133

Closed
Closed
@gnuletik

Description

@gnuletik

Describe the bug

When running nmap on a specific target, with the following parameters, nmap is crashing.

nmap -vv -PS443 -p 443 -sV --script http-ntlm-info --host-timeout 90

The following warnings are printed:

nmap: nse_nsock.cc:637: void receive_callback(nsock_pool, nsock_event, void*): Assertion `lua_status(L) == 1' failed.

And then nmap crash:

signal: aborted (core dumped)

To Reproduce

I'm not able to share the target on which this happens.

Expected behavior

It should not crash.

Version info (please complete the following information):

OS: Ubuntu Noble

$ nmap --iflist
************************INTERFACES************************
DEV     (SHORT)   IP/MASK          TYPE     UP   MTU   MAC
lo      (lo)      127.0.0.1/8      loopback up   65536
lo      (lo)      ::1/128          loopback up   65536
tunl0   (tunl0)   (none)/0         other    down 1480
sit0    (sit0)    (none)/0         other    down 1480
ip6tnl0 (ip6tnl0) (none)/0         other    down 1452
eth0    (eth0)    192.168.215.3/24 ethernet up   1500  1A:52:47:09:39:56

**************************ROUTES**************************
DST/MASK         DEV  METRIC GATEWAY
192.168.215.0/24 eth0 0
0.0.0.0/0        eth0 0      192.168.215.1
::1/128          lo   0
$ nmap --version
Nmap version 7.97 ( https://nmap.org )
Platform: x86_64-redhat-linux-gnu
Compiled with: nmap-liblua-5.4.7 openssl-3.0.16 nmap-libssh2-1.11.1 nmap-libz-1.3.1 nmap-libpcre2-10.45 nmap-libpcap-(with nmap-libdnet-1.18.0 ipv6
Compiled without:
Available nsock engines: epoll poll select
$ ldd $(which nmap)
	libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007ffffffbf000)
	libstdc++.so.6 => /lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007fffffd3f000)
	libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007fffffc56000)
	libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007fffffc28000)
	libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007fffffa16000)
	/lib64/ld-linux-x86-64.so.2 (0x00007ffffffc6000)

Workaround

When running nmap with -n, it doesn't crash:

-n/-R: Never do DNS resolution/Always resolve

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions