Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2020-7216: An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option.
CVE-2020-7216 · published 6 years ago
Summary
An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| opensuse | wicked |
<= 0.6.55 cpe:2.3:a:opensuse:wicked:*:*:*:*:*:*:*:* |
| opensuse | leap |
15.1 cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* |
Original advisory text
An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option.
An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option.
References
- http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00005.html Mailing List Vendor Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1160905 Issue Tracking Permissions Required Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-401Memory Leak
Timeline
Published5 Feb 2020
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2020-7216 · NVD
Track software like this
Free during beta