← CVE Intelligence

CVE-2019-18903

wicked: Use-after-free when receiving invalid DHCP6 IA_PD option PUBLISHED

Description (CNA)

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-2.18.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-28.26.1. openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.9.1. openSUSE Factory wicked versions prior to 0.6.62.

Affected (CNA)

Vendor / productVersions
SUSE / SUSE Linux Enterprise Server 12affected wicked before 0.6.60-2.18.1
SUSE / SUSE Linux Enterprise Server 15affected wicked before 0.6.60-28.26.1
openSUSE / Leap 15.1affected wicked before 0.6.60-lp151.2.9.1
openSUSE / Factoryaffected wicked before 0.6.62

CWE

CWE-416

References

ADP enrichment

CVE

No English description supplied.