wicked: Use-after-free when receiving invalid DHCP6 IA_PD option
Published Mar 2, 2020
9.8
CRITICALCVSS 3.1
EPSS 2.42%
Description
A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-2.18.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-28.26.1. openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.9.1. openSUSE Factory wicked versions prior to 0.6.62.
Affected products
-
- Version wickedStatusaffectedConstraints<0.6.60-2.18.1
- Version
-
- Version wickedStatusaffectedConstraints<0.6.60-28.26.1
- Version
-
- Version wickedStatusaffectedConstraints<0.6.62
- Version
-
- Version wickedStatusaffectedConstraints<0.6.60-lp151.2.9.1
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| SUSE | SUSE Linux Enterprise Server 12 | n/a |
| ||||||
| SUSE | SUSE Linux Enterprise Server 15 | n/a |
| ||||||
| openSUSE | Factory | n/a |
| ||||||
| openSUSE | Leap 15.1 | n/a |
|
- 15.1
- 12
- 15
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (1)
- https://bugzilla.suse.com/show_bug.cgi?id=1160904 x_refsource_CONFIRMIssue TrackingVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://bugzilla.suse.com/show_bug.cgi?id=1160904 | x_refsource_CONFIRMIssue TrackingVendor Advisory |
Change history (0)
No recorded changes yet.