CVE-2020-7217

Published: Feb 11, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets with a different client-id.

Affected (1)

Products: Opensuse: Wicked

Opensuse

1 product

Wicked

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Wicked	Up to 0.6.55

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (8)

http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00011.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=1160906

Source: cve@mitre.org

Issue TrackingVendor Advisory

https://github.com/openSUSE/wicked/releases

Source: cve@mitre.org

Release NotesThird Party Advisory

https://www.suse.com/security/cve/CVE-2020-7217/

Source: cve@mitre.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=1160906

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

https://github.com/openSUSE/wicked/releases

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://www.suse.com/security/cve/CVE-2020-7217/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.