PT-2020-19471

CVE-2020-7217

Published

2020-02-06

Updated

2024-06-15

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions openSUSE wicked versions 0.6.55 and earlier

Description A memory leak in the ni dhcp4 fsm process dhcp4 packet function allows network attackers to cause a denial of service by sending DHCP4 packets with a different client-id.

Recommendations For versions 0.6.55 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Malte Kraus

Vendors

Affected products

Weakness enumeration

CWE-401: Missing Release of Memory after Effective Lifetime

Related identifiers

CVE-2020-7217

OPENSUSE-SU-2020:0207-1

OPENSUSE-SU-2020_0207-1

OPENSUSE-SU-2024:11511-1