https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:42:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-360301 EUVD-2026-360301 https://cve.radiocsirt.org/vuln/euvd-2026-360301 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71401 <p>An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total length field (ip_len) is at least as large as the IP header length (ihl) before subtracting the header length. An unauthenticated attacker on the same network can thereby trigger an out-of-bounds read past the receive buffer in the wicked DHCPv4 client (wickedd-dhcp4), which can crash the daemon depending on the process memory layout. No information disclosure has been demonstrated. This issue affects wicked up to and including version 0.6.80.</p> <p>An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total length field (ip_len) is at least as large as the IP header length (ihl) before subtracting the header length. An unauthenticated attacker on the same network can thereby trigger an out-of-bounds read past the receive buffer in the wicked DHCPv4 client (wickedd-dhcp4), which can crash the daemon depending on the process memory layout. No information disclosure has been demonstrated. This issue affects wicked up to and including version 0.6.80.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-71401 https://cve.radiocsirt.org/vuln/ghsa-p653-f3q8-xm5f <p>An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total length field (ip_len) is at least as large as the IP header length (ihl) before subtracting the header length. An unauthenticated attacker on the same network can thereby trigger an out-of-bounds read past the receive buffer in the wicked DHCPv4 client (wickedd-dhcp4), which can crash the daemon depending on the process memory layout. No information disclosure has been demonstrated. This issue affects wicked up to and including version 0.6.80.</p> <p>An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total length field (ip_len) is at least as large as the IP header length (ihl) before subtracting the header length. An unauthenticated attacker on the same network can thereby trigger an out-of-bounds read past the receive buffer in the wicked DHCPv4 client (wickedd-dhcp4), which can crash the daemon depending on the process memory layout. No information disclosure has been demonstrated. This issue affects wicked up to and including version 0.6.80.</p> https://cve.radiocsirt.org/vuln/ghsa-p653-f3q8-xm5f https://cve.radiocsirt.org/vuln/opensuse-su-2026:11636-1 <p>wicked-0.6.80-2.1 on GA media</p> <p>wicked-0.6.80-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11636-1 https://cve.radiocsirt.org/vuln/suse-su-2026:3837-1 <p>Security update for wicked</p> <p>Security update for wicked</p> https://cve.radiocsirt.org/vuln/suse-su-2026:3837-1