Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2019-18902

wicked: Use-after-free when receiving invalid DHCP6 client options

Description

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-3.5.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-3.21.1. openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.6.1. openSUSE Factory wicked versions prior to 0.6.62.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE SUSE Linux Enterprise Server 12

  • wicked to < 0.6.60-3.5.1affected

SUSE SUSE Linux Enterprise Server 15

  • wicked to < 0.6.60-3.21.1affected

openSUSE Leap 15.1

  • wicked to < 0.6.60-lp151.2.6.1affected

openSUSE Factory

  • wicked to < 0.6.62affected

References