SUSE wicked güvenlik açıkları (CVE)

SUSE wicked için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç

5.4Orta

CVE-2026-71402 2 ay önce

wicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total length

SUSE wicked

An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option w…

5.3Orta

CVE-2026-71401 2 ay önce

wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read

SUSE wicked

An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total length field (ip_len) is at least as large as the IP header length (ihl) before subtracting the head…

8.8Yüksek

CVE-2026-44932 5 ay önce

indirect remote shell command injection via unsanitized DHCP options in wicked

SUSE wicked

Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine.