CVE-2018-6849

In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.

• CWE-200

• https://datarift.blogspot.com/p/private-ip-leakage-using-webrtc.htmlThird Party Advisory
• https://github.com/rapid7/metasploit-framework/pull/9538Issue Tracking, Third Party Advisory
• https://news.ycombinator.com/item?id=16699270Third Party Advisory
• https://voidsec.com/vpn-leak/Third Party Advisory
• https://www.exploit-db.com/exploits/44403/Exploit, Third Party Advisory, VDB Entry
• https://datarift.blogspot.com/p/private-ip-leakage-using-webrtc.htmlThird Party Advisory
• https://github.com/rapid7/metasploit-framework/pull/9538Issue Tracking, Third Party Advisory
• https://news.ycombinator.com/item?id=16699270Third Party Advisory
• https://voidsec.com/vpn-leak/Third Party Advisory
• https://www.exploit-db.com/exploits/44403/Exploit, Third Party Advisory, VDB Entry

Published

Apr 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6836The netmonrec_comment_destroy function in wiretap/netmon.c i…
• CVE-2018-6842Kentico 10 before 10.0.50 and 11 before 11.0.3 has XSS in wh…
• CVE-2018-6843Kentico 10 before 10.0.50 and 11 before 11.0.3 has SQL injec…
• CVE-2018-6844MyBB 1.8.14 has XSS via the Title or Description field on th…
• CVE-2018-6845PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has X…6.1
• CVE-2018-6846Z-BlogPHP 1.5.1 allows remote attackers to discover the full…
• CVE-2018-6851Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy be…
• CVE-2018-6852Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy be…
• CVE-2018-6853Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy be…
• CVE-2018-6854Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy be…
• CVE-2018-6855Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy be…
• CVE-2018-6856Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy be…