CVE-2020-7217 - An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets with a different client-id

Back Back to CVE browser

HIGH

An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets with a different client-id

Published Feb 10, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.64%

Description

An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets with a different client-id.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-401

References (5)

http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00011.html
vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1160906
x_refsource_MISCIssue TrackingVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28349
Advisory
https://github.com/openSUSE/wicked/releases
x_refsource_MISCRelease NotesThird Party Advisory
https://www.suse.com/security/cve/CVE-2020-7217/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00011.html		vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1160906		x_refsource_MISCIssue TrackingVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28349		Advisory
https://github.com/openSUSE/wicked/releases		x_refsource_MISCRelease NotesThird Party Advisory
https://www.suse.com/security/cve/CVE-2020-7217/		x_refsource_MISCVendor Advisory