CVE-2018-7419 describes a denial-of-service vulnerability in Wireshark versions 2.2.0 through 2.2.12 and 2.4.0 through 2.4.4, specifically within the NBAP dissector. An unauthenticated attacker could remotely crash the application due to improper DCH ID initialization, leading to a high-severity impact on availability. While the CVSS score is 7.5 (High), there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 2.2.0, <= 2.2.12CPE matchmatch criteria | cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:* | ||
>= 2.4.0, <= 2.4.4CPE matchmatch criteria | cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | ||
9.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.