Skip to content
Sign in
8.8 High

CVE-2026-44932 Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by…

Description

Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine.

Affected products and versions

Product Affected versions Fixed in
wicked 0.6 earliest → < 0.6.79 0.6.79

Other CVEs of wicked

The 3 CVEs of wicked →
CVE-2026-71402 An out-of-bounds read was found in the DHCPv4 packet capture code of wicked 5.3 Medium CVE-2026-71401 An integer underflow was found in the DHCPv4 packet capture code of wicked 5.3 Medium
Track this CVE