Vulnerability-Lookup

CVE-2018-6836 (GCVE-0-2018-6836)

Vulnerability from cvelistv5 – Published: 2018-02-08 07:00 – Updated: 2024-08-05 06:17

Summary

The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

Severity

9.8 (Critical)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Assigner

mitre mitre root

References

4 references

URL	Tags
https://code.wireshark.org/review/#/c/25660/2/wir…	x_refsource_MISC
https://code.wireshark.org/review/gitweb?p=wiresh…	x_refsource_MISC
https://bugs.wireshark.org/bugzilla/show_bug.cgi?…	x_refsource_MISC
https://code.wireshark.org/review/#/c/25660/	x_refsource_MISC

Date Public

2018-02-08 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:17:15.852Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=28960d79cca262ac6b974f339697b299a1e28fef"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://code.wireshark.org/review/#/c/25660/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-02-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-08T06:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=28960d79cca262ac6b974f339697b299a1e28fef"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://code.wireshark.org/review/#/c/25660/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-6836",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c"
            },
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=28960d79cca262ac6b974f339697b299a1e28fef",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=28960d79cca262ac6b974f339697b299a1e28fef"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397",
              "refsource": "MISC",
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397"
            },
            {
              "name": "https://code.wireshark.org/review/#/c/25660/",
              "refsource": "MISC",
              "url": "https://code.wireshark.org/review/#/c/25660/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-6836",
    "datePublished": "2018-02-08T07:00:00.000Z",
    "dateReserved": "2018-02-07T00:00:00.000Z",
    "dateUpdated": "2024-08-05T06:17:15.852Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2018-6836",
      "date": "2026-08-29",
      "epss": "0.02424",
      "percentile": "0.82911"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"2.4.4\", \"matchCriteriaId\": \"EE0E1775-EE18-4D6A-B04E-42DE748545F5\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.\"}, {\"lang\": \"es\", \"value\": \"La funci\\u00f3n netmonrec_comment_destroy en wiretap/netmon.c en Wireshark, hasta la versi\\u00f3n 2.4.4, realiza una operaci\\u00f3n de liberaci\\u00f3n en una direcci\\u00f3n de memoria no inicializada, lo que permite que atacantes remotos provoquen una denegaci\\u00f3n de servicio (cierre inesperado de la aplicaci\\u00f3n) u otro tipo de impacto sin especificar.\"}]",
      "id": "CVE-2018-6836",
      "lastModified": "2024-11-21T04:11:16.433",
      "metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2018-02-08T07:29:01.197",
      "references": "[{\"url\": \"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://code.wireshark.org/review/#/c/25660/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Patch\"]}, {\"url\": \"https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=28960d79cca262ac6b974f339697b299a1e28fef\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Third Party Advisory\"]}, {\"url\": \"https://code.wireshark.org/review/#/c/25660/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Patch\"]}, {\"url\": \"https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=28960d79cca262ac6b974f339697b299a1e28fef\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-763\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2018-6836\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2018-02-08T07:29:01.197\",\"lastModified\":\"2024-11-21T04:11:16.433\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n netmonrec_comment_destroy en wiretap/netmon.c en Wireshark, hasta la versi\u00f3n 2.4.4, realiza una operaci\u00f3n de liberaci\u00f3n en una direcci\u00f3n de memoria no inicializada, lo que permite que atacantes remotos provoquen una denegaci\u00f3n de servicio (cierre inesperado de la aplicaci\u00f3n) u otro tipo de impacto sin especificar.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-763\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.4.4\",\"matchCriteriaId\":\"EE0E1775-EE18-4D6A-B04E-42DE748545F5\"}]}]}],\"references\":[{\"url\":\"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://code.wireshark.org/review/#/c/25660/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=28960d79cca262ac6b974f339697b299a1e28fef\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://code.wireshark.org/review/#/c/25660/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=28960d79cca262ac6b974f339697b299a1e28fef\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T17:12:02+00:00",
      "cve": "CVE-2018-6836",
      "id": "CVE-2018-6836",
      "initial_release_date": "2018-02-05T00:00:00+00:00",
      "product_status:known_affected": "13",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "wireshark: free operation on an uninitialized memory address in wiretap/netmon.c",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2018/cve-2018-6836.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "critical",
      "current_release_date": "2025-10-07T09:59:56Z",
      "cve": "CVE-2018-6836",
      "id": "CVE-2018-6836",
      "initial_release_date": "2023-02-15T04:30:12Z",
      "product_status:known_not_affected": "395",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2018-6836",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2018-6836.json",
      "version": "15"
    }
  }
}

CNVD-2018-04896

Vulnerability from cnvd - Published: 2018-03-12

Title

Wireshark 'netmonrec_comment_destroy'函数拒绝服务漏洞

Description

Wireshark（前称Ethereal）是Wireshark团队开发的一套网络数据包分析软件。该软件的功能是截取网络数据包，并显示出详细的数据以供分析。 Wireshark 2.4.4及之前版本中的wiretap/netmon.c文件的'netmonrec_comment_destroy'函数存在安全漏洞，该漏洞源于程序在未初始化的内存地址上执行释放操作。远程攻击者可利用该漏洞造成拒绝服务（应用系统崩溃）。

Severity

中

Patch Name

Wireshark 'netmonrec_comment_destroy'函数拒绝服务漏洞的补丁

Patch Description

Formal description

厂商已发布漏洞修复程序，请及时关注更新： https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=28960d79cca262ac6b974f339697b299a1e28fef

Reference

https://nvd.nist.gov/vuln/detail/CVE-2018-6836

Impacted products

Name
['Wireshark Wireshark >=2.2.0，<=2.2.12', 'Wireshark Wireshark >=2.4.0，<=2.4.4']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-6836"
    }
  },
  "description": "Wireshark\uff08\u524d\u79f0Ethereal\uff09\u662fWireshark\u56e2\u961f\u5f00\u53d1\u7684\u4e00\u5957\u7f51\u7edc\u6570\u636e\u5305\u5206\u6790\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u7684\u529f\u80fd\u662f\u622a\u53d6\u7f51\u7edc\u6570\u636e\u5305\uff0c\u5e76\u663e\u793a\u51fa\u8be6\u7ec6\u7684\u6570\u636e\u4ee5\u4f9b\u5206\u6790\u3002\r\n\r\nWireshark 2.4.4\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u7684wiretap/netmon.c\u6587\u4ef6\u7684\u0027netmonrec_comment_destroy\u0027\u51fd\u6570\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5728\u672a\u521d\u59cb\u5316\u7684\u5185\u5b58\u5730\u5740\u4e0a\u6267\u884c\u91ca\u653e\u64cd\u4f5c\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5e94\u7528\u7cfb\u7edf\u5d29\u6e83\uff09\u3002",
  "discovererName": "unknwon",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=28960d79cca262ac6b974f339697b299a1e28fef",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-04896",
  "openTime": "2018-03-12",
  "patchDescription": "Wireshark\uff08\u524d\u79f0Ethereal\uff09\u662fWireshark\u56e2\u961f\u5f00\u53d1\u7684\u4e00\u5957\u7f51\u7edc\u6570\u636e\u5305\u5206\u6790\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u7684\u529f\u80fd\u662f\u622a\u53d6\u7f51\u7edc\u6570\u636e\u5305\uff0c\u5e76\u663e\u793a\u51fa\u8be6\u7ec6\u7684\u6570\u636e\u4ee5\u4f9b\u5206\u6790\u3002\r\n\r\nWireshark 2.4.4\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u7684wiretap/netmon.c\u6587\u4ef6\u7684\u0027netmonrec_comment_destroy\u0027\u51fd\u6570\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5728\u672a\u521d\u59cb\u5316\u7684\u5185\u5b58\u5730\u5740\u4e0a\u6267\u884c\u91ca\u653e\u64cd\u4f5c\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5e94\u7528\u7cfb\u7edf\u5d29\u6e83\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Wireshark \u0027netmonrec_comment_destroy\u0027\u51fd\u6570\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Wireshark Wireshark \u003e=2.2.0\uff0c\u003c=2.2.12",
      "Wireshark Wireshark \u003e=2.4.0\uff0c\u003c=2.4.4"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2018-6836",
  "serverity": "\u4e2d",
  "submitTime": "2018-02-08",
  "title": "Wireshark \u0027netmonrec_comment_destroy\u0027\u51fd\u6570\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

FKIE_CVE-2018-6836

Vulnerability from fkie_nvd - Published: 2018-02-08 07:29 - Updated: 2026-06-17 02:02

Severity

9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
cve@mitre.org	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397	Exploit, Issue Tracking, Third Party Advisory
cve@mitre.org	https://code.wireshark.org/review/#/c/25660/	Issue Tracking, Patch
cve@mitre.org	https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c	Patch
cve@mitre.org	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=28960d79cca262ac6b974f339697b299a1e28fef
af854a3a-2127-422b-91ae-364da2661108	https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397	Exploit, Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://code.wireshark.org/review/#/c/25660/	Issue Tracking, Patch
af854a3a-2127-422b-91ae-364da2661108	https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c	Patch
af854a3a-2127-422b-91ae-364da2661108	https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=28960d79cca262ac6b974f339697b299a1e28fef

Impacted products

	Vendor	Product	Version
	wireshark	wireshark	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE0E1775-EE18-4D6A-B04E-42DE748545F5",
              "versionEndIncluding": "2.4.4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n netmonrec_comment_destroy en wiretap/netmon.c en Wireshark, hasta la versi\u00f3n 2.4.4, realiza una operaci\u00f3n de liberaci\u00f3n en una direcci\u00f3n de memoria no inicializada, lo que permite que atacantes remotos provoquen una denegaci\u00f3n de servicio (cierre inesperado de la aplicaci\u00f3n) u otro tipo de impacto sin especificar."
    }
  ],
  "id": "CVE-2018-6836",
  "lastModified": "2026-06-17T02:02:20.580",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2018-02-08T07:29:01.197",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://code.wireshark.org/review/#/c/25660/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=28960d79cca262ac6b974f339697b299a1e28fef"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://code.wireshark.org/review/#/c/25660/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=28960d79cca262ac6b974f339697b299a1e28fef"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-763"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-79GQ-68M6-V3VG

Vulnerability from github – Published: 2022-05-13 01:20 – Updated: 2022-05-13 01:20

Details

Severity

9.8 (Critical)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2018-6836"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-763"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2018-02-08T07:29:00Z",
    "severity": "CRITICAL"
  },
  "details": "The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.",
  "id": "GHSA-79gq-68m6-v3vg",
  "modified": "2022-05-13T01:20:31Z",
  "published": "2022-05-13T01:20:31Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6836"
    },
    {
      "type": "WEB",
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397"
    },
    {
      "type": "WEB",
      "url": "https://code.wireshark.org/review/#/c/25660"
    },
    {
      "type": "WEB",
      "url": "https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c"
    },
    {
      "type": "WEB",
      "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=28960d79cca262ac6b974f339697b299a1e28fef"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2018-6836

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2018-6836

Aliases

CVE-2018-6836

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2018-6836",
    "description": "The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.",
    "id": "GSD-2018-6836",
    "references": [
      "https://www.suse.com/security/cve/CVE-2018-6836.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2018-6836"
      ],
      "details": "The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.",
      "id": "GSD-2018-6836",
      "modified": "2023-12-13T01:22:35.542786Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2018-6836",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c",
            "refsource": "MISC",
            "url": "https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c"
          },
          {
            "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=28960d79cca262ac6b974f339697b299a1e28fef",
            "refsource": "MISC",
            "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=28960d79cca262ac6b974f339697b299a1e28fef"
          },
          {
            "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397",
            "refsource": "MISC",
            "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397"
          },
          {
            "name": "https://code.wireshark.org/review/#/c/25660/",
            "refsource": "MISC",
            "url": "https://code.wireshark.org/review/#/c/25660/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "2.4.4",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-6836"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-763"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=28960d79cca262ac6b974f339697b299a1e28fef",
              "refsource": "MISC",
              "tags": [
                "Issue Tracking",
                "Patch"
              ],
              "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=28960d79cca262ac6b974f339697b299a1e28fef"
            },
            {
              "name": "https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c",
              "refsource": "MISC",
              "tags": [
                "Patch"
              ],
              "url": "https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c"
            },
            {
              "name": "https://code.wireshark.org/review/#/c/25660/",
              "refsource": "MISC",
              "tags": [
                "Issue Tracking",
                "Patch"
              ],
              "url": "https://code.wireshark.org/review/#/c/25660/"
            },
            {
              "name": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397",
              "refsource": "MISC",
              "tags": [
                "Exploit",
                "Issue Tracking",
                "Third Party Advisory"
              ],
              "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2020-08-24T17:37Z",
      "publishedDate": "2018-02-08T07:29Z"
    }
  }
}

ubuntu-cve-2018-6836

Vulnerability from osv_ubuntu

Published

2018-02-08 07:29

Modified

2026-04-22 07:38

Summary

Details

Severity

9.8 (Critical)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2018-6836	REPORT
	https://bugs.wireshark.org/bugzilla/show_bug.cgi?…	REPORT
	https://code.wireshark.org/review/gitweb?p=wiresh…	REPORT
	https://code.wireshark.org/review/#/c/25660/	REPORT
	https://code.wireshark.org/review/#/c/25660/2/wir…	REPORT
	https://www.cve.org/CVERecord?id=CVE-2018-6836	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libwireshark-data",
            "binary_version": "2.6.3-1~ubuntu14.04.1"
          },
          {
            "binary_name": "libwireshark11",
            "binary_version": "2.6.3-1~ubuntu14.04.1"
          },
          {
            "binary_name": "libwiretap8",
            "binary_version": "2.6.3-1~ubuntu14.04.1"
          },
          {
            "binary_name": "libwscodecs2",
            "binary_version": "2.6.3-1~ubuntu14.04.1"
          },
          {
            "binary_name": "libwsutil9",
            "binary_version": "2.6.3-1~ubuntu14.04.1"
          },
          {
            "binary_name": "tshark",
            "binary_version": "2.6.3-1~ubuntu14.04.1"
          },
          {
            "binary_name": "wireshark",
            "binary_version": "2.6.3-1~ubuntu14.04.1"
          },
          {
            "binary_name": "wireshark-common",
            "binary_version": "2.6.3-1~ubuntu14.04.1"
          },
          {
            "binary_name": "wireshark-gtk",
            "binary_version": "2.6.3-1~ubuntu14.04.1"
          },
          {
            "binary_name": "wireshark-qt",
            "binary_version": "2.6.3-1~ubuntu14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "wireshark",
        "purl": "pkg:deb/ubuntu/wireshark@2.6.3-1~ubuntu14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.3-1~ubuntu14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.10.2-1",
        "1.10.3-1",
        "1.10.5-1ubuntu1",
        "1.10.5-2",
        "1.10.6-1",
        "1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libwireshark-data",
            "binary_version": "2.6.3-1~ubuntu16.04.1"
          },
          {
            "binary_name": "libwireshark11",
            "binary_version": "2.6.3-1~ubuntu16.04.1"
          },
          {
            "binary_name": "libwiretap8",
            "binary_version": "2.6.3-1~ubuntu16.04.1"
          },
          {
            "binary_name": "libwscodecs2",
            "binary_version": "2.6.3-1~ubuntu16.04.1"
          },
          {
            "binary_name": "libwsutil9",
            "binary_version": "2.6.3-1~ubuntu16.04.1"
          },
          {
            "binary_name": "tshark",
            "binary_version": "2.6.3-1~ubuntu16.04.1"
          },
          {
            "binary_name": "wireshark",
            "binary_version": "2.6.3-1~ubuntu16.04.1"
          },
          {
            "binary_name": "wireshark-common",
            "binary_version": "2.6.3-1~ubuntu16.04.1"
          },
          {
            "binary_name": "wireshark-gtk",
            "binary_version": "2.6.3-1~ubuntu16.04.1"
          },
          {
            "binary_name": "wireshark-qt",
            "binary_version": "2.6.3-1~ubuntu16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "wireshark",
        "purl": "pkg:deb/ubuntu/wireshark@2.6.3-1~ubuntu16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.3-1~ubuntu16.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.12.7+g7fc8978-1",
        "1.12.8+g5b6e543-2",
        "2.0.1+g59ea380-3build1",
        "2.0.2+ga16e22e-1",
        "2.2.6+g32dac6a-2ubuntu0.16.04"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libwireshark-data",
            "binary_version": "2.6.3-1~ubuntu18.04.1"
          },
          {
            "binary_name": "libwireshark11",
            "binary_version": "2.6.3-1~ubuntu18.04.1"
          },
          {
            "binary_name": "libwiretap8",
            "binary_version": "2.6.3-1~ubuntu18.04.1"
          },
          {
            "binary_name": "libwscodecs2",
            "binary_version": "2.6.3-1~ubuntu18.04.1"
          },
          {
            "binary_name": "libwsutil9",
            "binary_version": "2.6.3-1~ubuntu18.04.1"
          },
          {
            "binary_name": "tshark",
            "binary_version": "2.6.3-1~ubuntu18.04.1"
          },
          {
            "binary_name": "wireshark",
            "binary_version": "2.6.3-1~ubuntu18.04.1"
          },
          {
            "binary_name": "wireshark-common",
            "binary_version": "2.6.3-1~ubuntu18.04.1"
          },
          {
            "binary_name": "wireshark-gtk",
            "binary_version": "2.6.3-1~ubuntu18.04.1"
          },
          {
            "binary_name": "wireshark-qt",
            "binary_version": "2.6.3-1~ubuntu18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "wireshark",
        "purl": "pkg:deb/ubuntu/wireshark@2.6.3-1~ubuntu18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.3-1~ubuntu18.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.2-1",
        "2.4.3-1",
        "2.4.4-1",
        "2.4.5-1"
      ]
    }
  ],
  "aliases": [],
  "details": "The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.",
  "id": "UBUNTU-CVE-2018-6836",
  "modified": "2026-04-22T07:38:34Z",
  "published": "2018-02-08T07:29:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-6836"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397"
    },
    {
      "type": "REPORT",
      "url": "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=28960d79cca262ac6b974f339697b299a1e28fef"
    },
    {
      "type": "REPORT",
      "url": "https://code.wireshark.org/review/#/c/25660/"
    },
    {
      "type": "REPORT",
      "url": "https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-6836"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-6836"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2018-6836 (GCVE-0-2018-6836)

CNVD-2018-04896

FKIE_CVE-2018-6836

GHSA-79GQ-68M6-V3VG

GSD-2018-6836

ubuntu-cve-2018-6836

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature