Skip to content
fr Sign in
7.5 High

CVE-2019-18902 A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE…

Description

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-3.5.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-3.21.1. openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.6.1. openSUSE Factory wicked versions prior to 0.6.62.

Affected products and versions

Product Affected versions Fixed in
SUSE Linux Enterprise Server 12 0.6 earliest → < 0.6.60-3.5.1 0.6.60-3.5.1
SUSE Linux Enterprise Server 15 0.6 earliest → < 0.6.60-3.21.1 0.6.60-3.21.1
Leap 15.1 0.6 earliest → < 0.6.60-lp151.2.6.1 0.6.60-lp151.2.6.1
Factory 0.6 earliest → < 0.6.62 0.6.62

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SUSE Linux Enterprise Server 12

The 12 CVEs of SUSE Linux Enterprise Server 12 →
CVE-2022-45154 A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE… 4.4 Medium CVE-2019-18905 A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE… 4.8 Medium CVE-2019-18903 A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE… 7.5 High CVE-2020-8013 A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux… 2.2 Low
Track this CVE