CVE-2018-14466

CVE-2018-14466 describes a buffer over-read vulnerability in the Rx parser of tcpdump versions prior to 4.9.3, specifically within the rx_cache_find() and rx_cache_insert() functions in print-rx.c. This flaw affects various operating systems and distributions including Apple, Debian, Fedora, openSUSE, and Red Hat. With a CVSS score of 7.5 (HIGH), this vulnerability is remotely exploitable with low attack complexity, requiring no user interaction, and could lead to a denial of service. The EPSS score is low, suggesting a minimal likelihood of exploitation in the wild. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also absent, indicating a lack of widespread attention or exploitation.