CVE-2018-12086 · cross-distro fix matrix

CVE-2018-12086: Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.

Affects 8 Linux releases across 8 (distro × package) combinations.

Elevated exploitation risk

FIRST EPSS puts CVE-2018-12086's probability of exploitation in the next 30 days at 12% (95th percentile of all CVEs)— well above the noise floor. Prioritize it.

EPSS:12% · 30-day exploit probability95th percentile

Fix per ecosystem

Each block below is a distro release where CVE-2018-12086 has a known fix. Run the listed command on that distro to remediate.

Debian bullseye

Source: Debian Security Tracker

wireshark→ fixed in2.6.4-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y wireshark
```

Debian bookworm

Source: Debian Security Tracker

wireshark→ fixed in2.6.4-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y wireshark
```

Debian trixie

Source: Debian Security Tracker

wireshark→ fixed in2.6.4-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y wireshark
```