CVE-2018-11354 describes a denial-of-service vulnerability in Wireshark version 2.6.0, specifically within its IEEE 1905.1a dissector, which could lead to a crash due to improper string handling. This vulnerability carries a CVSS score of 7.5 (HIGH), indicating that it can be exploited remotely without user interaction to cause a complete loss of availability. While the EPSS score is low and there's no evidence of active exploitation, public exploit code, or community discussion, the flaw was addressed by a specific code correction in the affected dissector.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.6.0CPE matchmatch criteria | cpe:2.3:a:wireshark:wireshark:2.6.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.