SUSE-SU-2020:0369-1: wicked&distro=SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise

CVSS: UnknownPublished

Published 07-02-2020Last modified 04-02-2026

Vulnerability summary

SUSE-SU-2020:0369-1 is a vulnerability in wicked&distro=SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 4 · Downstream 0 · Related 4

CVE-2019-18902 CVE-2019-18903 CVE-2020-7216 CVE-2020-7217

Timeline

07-02-2020
PublishedVulnerability first disclosed.
04-02-2026
Last modifiedVulnerability information updated.

Description

Security update for wicked This update for wicked fixes the following issues: - CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options (bsc#1160903). - CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IA_PD option (bsc#1160904). - CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 (bsc#1160905). - CVE-2020-7217: Fixed a memory leak in DHCP4 fsm when processing packets for other client ids (bsc#1160906).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse3 products

wicked&distro=SUSE Linux Enterprise Desktop 12 SP4< 0.6.60-2.18.1
wicked&distro=SUSE Linux Enterprise Server 12 SP4< 0.6.60-2.18.1
wicked&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4< 0.6.60-2.18.1

1 vendor · 3 products

References

9 links