CVE-2026-44932
Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine.
Zwakheid
Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine.
Bronnen
- https://bugzilla.suse.com/show_bug.cgi?id=1265221
- https://github.com/openSUSE/wicked/releases/tag/version-0.6.79
- https://lists.suse.com/pipermail/sle-security-updates/2026-June/026688.html
- https://lists.suse.com/pipermail/sle-security-updates/2026-June/026689.html
- https://lists.suse.com/pipermail/sle-security-updates/2026-June/026690.html
- https://lists.suse.com/pipermail/sle-security-updates/2026-June/026691.html
Vind de bug voordat een aanvaller dat doet.
Log in met GitHub en start je eerste audit binnen een minuut. Voor het gratis abonnement is geen creditcard nodig.