CVE-2018-12086 - wireshark: OpcUa dissector crash

HIGH

wireshark: OpcUa dissector crash

Published Sep 14, 2018

7.5

HIGH

CVSS 3.0

EPSS 11.81%

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	wireshark	Not affected	n/a
Red Hat Enterprise Linux 6	wireshark	Not affected	n/a
Red Hat Enterprise Linux 7	wireshark	Not affected	n/a
Red Hat Enterprise Linux 8	wireshark	Not affected	n/a

No remediation recorded yet.

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-787

Out-of-bounds Write

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html		vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/105538		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041909		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2018-12086		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1642915		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0535		Advisory
https://github.com/advisories/GHSA-782p-53wq-cxmj		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-12086
https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf		x_refsource_CONFIRMVendor Advisory
https://www.cve.org/CVERecord?id=CVE-2018-12086
https://www.debian.org/security/2018/dsa-4359		vendor-advisoryx_refsource_DEBIANThird Party Advisory
https://www.wireshark.org/security/wnpa-sec-2018-50