Wicked (Suse) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-08-27. Vendor: Suse.

CVEs of Wicked

• CVE-2026-71402 - CVSS 5.4 (medium), 2026-08-27: An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c reports the IP total length as…
• CVE-2026-71401 - CVSS 5.3 (medium), 2026-08-27: An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total…
• CVE-2026-44932 - CVSS 8.8 (high), 2026-06-16: Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server…