SUSE wicked Schwachstellen (CVE)

Für SUSE wicked veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse

5.4Mittel

CVE-2026-71402 vor 2 Monaten

wicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total length

SUSE wicked

An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option w…

5.3Mittel

CVE-2026-71401 vor 2 Monaten

wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read

SUSE wicked

An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total length field (ip_len) is at least as large as the IP header length (ihl) before subtracting the head…

8.8Hoch

CVE-2026-44932 vor 5 Monaten

indirect remote shell command injection via unsanitized DHCP options in wicked

SUSE wicked

Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine.