← CVE Intelligence

CVE-2019-18902

wicked: Use-after-free when receiving invalid DHCP6 client options PUBLISHED

Description (CNA)

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-3.5.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-3.21.1. openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.6.1. openSUSE Factory wicked versions prior to 0.6.62.

Affected (CNA)

Vendor / productVersions
SUSE / SUSE Linux Enterprise Server 12affected wicked before 0.6.60-3.5.1
SUSE / SUSE Linux Enterprise Server 15affected wicked before 0.6.60-3.21.1
openSUSE / Leap 15.1affected wicked before 0.6.60-lp151.2.6.1
openSUSE / Factoryaffected wicked before 0.6.62

CWE

CWE-416

References

ADP enrichment

CVE

No English description supplied.