CVE-2018-9258 describes a denial-of-service vulnerability in Wireshark versions 2.4.0 through 2.4.5, specifically within the TCP dissector, which could lead to a crash. This high-severity vulnerability (CVSS 7.5) is network-exploitable with low attack complexity, allowing an unauthenticated attacker to cause a denial of service without user interaction. While the vulnerability is not listed on CISA's KEV catalog and has no known public exploits or significant community discussion, it affects various Debian distributions of Wireshark.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 2.4.0, <= 2.4.5CPE matchmatch criteria | cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.