{"id":"CVE-2018-12086","aliases":["DEBIAN-CVE-2018-12086","DSA-4359-1","EUVD-2018-0535","GHSA-782p-53wq-cxmj","SUSE-SU-2018:3282-1","SUSE-SU-2018:3590-1","SUSE-SU-2018:3590-2","SUSE-SU-2018:3590-3","SUSE-SU-2020:0693-1","openSUSE-SU-2020:0362-1","openSUSE-SU-2024:11513-1"],"status":"published","title":"High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua","description":"Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.11809,"percentile":0.96115,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-787"],"published":"2018-09-14T21:00:00Z","modified":"2026-10-24T10:30:52Z","exploits":[{"source":"pocgithub","id":"kevinherron/stack-overflow-poc","title":"kevinherron/stack-overflow-poc","date":"2019-02-20","url":"https://github.com/kevinherron/stack-overflow-poc"}],"fixes":[{"ecosystem":"NuGet","package":"OPCFoundation.NetStandard.Opc.Ua","fixed_in":["1.4.353.15"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"wireshark","fixed_in":["2.6.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["2.6.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["2.6.4-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"NuGet","package":"OPCFoundation.NetStandard.Opc.Ua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.4.352.12"},{"fixed":"1.4.353.15"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.4-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.5-1~deb9u1"}]}],"versions":["2.2.6+g32dac6a-2","2.2.6+g32dac6a-2+deb9u1","2.2.6+g32dac6a-2+deb9u2","2.2.6+g32dac6a-2+deb9u3","2.2.7-1","2.4.0-1","2.4.1-1","2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1","2.4.6-1","2.6.1-1","2.6.2-1","2.6.2-2","2.6.3-1","2.6.3-1~deb9u1","2.6.4-1","2.6.4-2"],"bundled":11},{"source":"osv","ecosystem":"NuGet","package":"OPCFoundation.NetStandard.Opc.Ua","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.353.15"}]}],"versions":["0.4.0","0.4.1","0.4.3","0.4.4","0.4.5","1.3.348","1.3.349","1.3.350","1.3.350.1","1.3.350.3","1.3.350.4","1.3.350.5","1.3.350.6","1.3.351.7","1.3.352.10","1.3.352.11","1.3.352.12","1.3.352.9","1.4.353.13","1.4.353.14"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-3.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-3.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.10-48.32.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libmaxminddb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-1.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-3.2.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.35.2"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-3.2.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.35.2"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libmaxminddb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-1.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-3.2.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.35.2"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libmaxminddb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-1.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-3.2.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.35.2"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libmaxminddb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-1.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-3.2.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.35.2"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libmaxminddb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-1.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-3.2.1"}]}],"bundled":59},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-3.35.2"}]}],"bundled":59},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libmaxminddb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-lp151.3.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"spandsp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.6-lp151.3.3.1"}]}],"bundled":59},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-lp151.2.9.1"}]}],"bundled":59},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-1.2"}]}],"bundled":163}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"opcfoundation","product":"unified_architecture-.net-legacy"},{"vendor":"opcfoundation","product":"unified_architecture-java"},{"vendor":"opcfoundation","product":"unified_architecture_.net-standard"},{"vendor":"opcfoundation","product":"unified_architecture_ansic"}],"references":[{"url":"http://www.securitytracker.com/id/1041909","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"http://www.securityfocus.com/bid/105538","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://www.debian.org/security/2018/dsa-4359","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12086","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-782p-53wq-cxmj","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-12086","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183282-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1111647","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18227","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183590-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183590-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183590-3/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200693-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1093733","tags":["report"]},{"url":"https://bugzilla.suse.com/1094301","tags":["report"]},{"url":"https://bugzilla.suse.com/1101776","tags":["report"]},{"url":"https://bugzilla.suse.com/1101777","tags":["report"]},{"url":"https://bugzilla.suse.com/1101786","tags":["report"]},{"url":"https://bugzilla.suse.com/1101788","tags":["report"]},{"url":"https://bugzilla.suse.com/1101791","tags":["report"]},{"url":"https://bugzilla.suse.com/1101794","tags":["report"]},{"url":"https://bugzilla.suse.com/1101800","tags":["report"]},{"url":"https://bugzilla.suse.com/1101802","tags":["report"]},{"url":"https://bugzilla.suse.com/1101804","tags":["report"]},{"url":"https://bugzilla.suse.com/1101810","tags":["report"]},{"url":"https://bugzilla.suse.com/1106514","tags":["report"]},{"url":"https://bugzilla.suse.com/1117740","tags":["report"]},{"url":"https://bugzilla.suse.com/1121231","tags":["report"]},{"url":"https://bugzilla.suse.com/1121232","tags":["report"]},{"url":"https://bugzilla.suse.com/1121233","tags":["report"]},{"url":"https://bugzilla.suse.com/1121234","tags":["report"]},{"url":"https://bugzilla.suse.com/1121235","tags":["report"]},{"url":"https://bugzilla.suse.com/1127367","tags":["report"]},{"url":"https://bugzilla.suse.com/1127369","tags":["report"]},{"url":"https://bugzilla.suse.com/1127370","tags":["report"]},{"url":"https://bugzilla.suse.com/1131941","tags":["report"]},{"url":"https://bugzilla.suse.com/1131945","tags":["report"]},{"url":"https://bugzilla.suse.com/1136021","tags":["report"]},{"url":"https://bugzilla.suse.com/1141980","tags":["report"]},{"url":"https://bugzilla.suse.com/1150690","tags":["report"]},{"url":"https://bugzilla.suse.com/1156288","tags":["report"]},{"url":"https://bugzilla.suse.com/1158505","tags":["report"]},{"url":"https://bugzilla.suse.com/1161052","tags":["report"]},{"url":"https://bugzilla.suse.com/1165241","tags":["report"]},{"url":"https://bugzilla.suse.com/1165710","tags":["report"]},{"url":"https://bugzilla.suse.com/957624","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9431","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5IUFGOOBYOJSD6ELATYP2KAV4TMLYPWB/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22235","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-12086","description":"Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.","status":"published","published":"2018-09-14T21:00:00Z","modified":"2024-08-05T08:24:03.683Z","updated_at":"2026-11-02T14:35:06.679212Z"}],"euvd":[{"id":"EUVD-2018-0535","description":"Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.","status":"published","published":"2018-09-14T21:00:00Z","modified":"2024-08-05T08:24:03Z","updated_at":"2026-11-03T02:39:54.130594Z"}],"ghsa":[{"id":"GHSA-782p-53wq-cxmj","title":"High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua","description":"Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.","status":"published","published":"2018-10-16T19:51:31Z","modified":"2023-01-09T05:02:47Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:36:03.768255Z"}],"nvd":[{"id":"CVE-2018-12086","description":"Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.","status":"published","published":"2018-09-14T21:29:03.583Z","modified":"2026-06-17T01:37:07.6Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:04:40.661264Z"}],"osv":[{"id":"CVE-2018-12086","description":"Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.","status":"published","published":"2018-09-14T21:29:03.583Z","modified":"2026-10-24T10:30:52.142805177Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.934182Z"},{"id":"DEBIAN-CVE-2018-12086","description":"Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.","status":"published","published":"2018-09-14T21:29:03.583Z","modified":"2026-10-23T18:02:58.482251479Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"GHSA-782p-53wq-cxmj","title":"High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua","description":"Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.","status":"published","published":"2018-10-16T19:51:31Z","modified":"2023-11-08T03:59:49.114679Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:46:40.657155Z"},{"id":"DSA-4359-1","title":"wireshark - security update","status":"published","published":"2018-12-27T00:00:00Z","modified":"2026-03-09T02:11:00.057274Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"openSUSE-SU-2020:0362-1","title":"Security update for wireshark","description":"This update for wireshark and libmaxminddb fixes the following issues:\n\nUpdate wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).\n\nNew features include:\n\n- Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC\n- Improved support for existing protocols, like HTTP/2\n- Improved analytics and usability functionalities\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-03-19T19:19:35Z","modified":"2026-02-04T04:38:44.359525Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11513-1","title":"libwireshark14-3.4.8-1.2 on GA media","description":"These are all security issues fixed in the libwireshark14-3.4.8-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:58:40.825311Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2018:3282-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\nWireshark was updated to 2.4.10 (bsc#1111647).\n\nFollowing security issues were fixed:\n\n- CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)\n- CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)\n\nFurther bug fixes and updated protocol support that were done are listed in:\n\n  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html\n\n","status":"published","published":"2018-10-22T11:13:33Z","modified":"2026-02-04T03:33:46.144511Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3590-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\nWireshark was updated to 2.4.10 (bsc#1111647).\n\nFollowing security issues were fixed:\n\n- CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)\n- CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)\n\nFurther bug fixes and updated protocol support that were done are listed in:\n\n  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html\n","status":"published","published":"2018-10-31T14:02:45Z","modified":"2026-02-04T02:43:15.028396Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3590-2","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\nWireshark was updated to 2.4.10 (bsc#1111647).\n\nFollowing security issues were fixed:\n\n- CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)\n- CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)\n\nFurther bug fixes and updated protocol support that were done are listed in:\n\n  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html\n","status":"published","published":"2018-12-05T13:41:20Z","modified":"2026-02-04T02:27:04.184087Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3590-3","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\nWireshark was updated to 2.4.10 (bsc#1111647).\n\nFollowing security issues were fixed:\n\n- CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47)\n- CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50)\n\nFurther bug fixes and updated protocol support that were done are listed in:\n\n  https://www.wireshark.org/docs/relnotes/wireshark-2.4.10.html\n","status":"published","published":"2019-04-27T14:30:00Z","modified":"2026-02-04T02:13:38.501335Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2020:0693-1","title":"Security update for wireshark","description":"This update for wireshark and libmaxminddb fixes the following issues:\n\nUpdate wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).\n\nNew features include:\n\n- Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC\n- Improved support for existing protocols, like HTTP/2\n- Improved analytics and usability functionalities\n","status":"published","published":"2020-04-08T12:11:42Z","modified":"2026-02-04T04:34:24.153787Z","updated_at":"2026-11-02T15:53:47.06185Z"}]}}