PT-2020-10011

CVE-2019-18903

·

Published

2020-02-06

·

Updated

2024-06-15

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-2.18.1 SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-28.26.1 openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.9.1 openSUSE Factory wicked versions prior to 0.6.62
Description A Use After Free issue in wicked allows remote attackers to cause Denial of Service (DoS) or potentially execute code.
Recommendations For SUSE Linux Enterprise Server 12, update wicked to version 0.6.60-2.18.1 or later. For SUSE Linux Enterprise Server 15, update wicked to version 0.6.60-28.26.1 or later. For openSUSE Leap 15.1, update wicked to version 0.6.60-lp151.2.9.1 or later. For openSUSE Factory, update wicked to version 0.6.62 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
OPENSUSE-SU-2020:0207-1
OPENSUSE-SU-2020_0207-1
OPENSUSE-SU-2024:11511-1
SUSE-SU-2020:0347-1
SUSE-SU-2020_0347-1
SUSE-SU-2020:0351-1
SUSE-SU-2020:0358-1
SUSE-SU-2020:0369-1
SUSE-SU-2020:0370-1
SUSE-SU-2020_0370-1
SUSE-SU-2020:0410-1
Found an issue in the description? Have something to add? Feel free to write us 👾