SUSE-SU-2026:3840-1
Vulnerability from csaf_suse - Published: 2026-08-27 12:21 - Updated: 2026-09-17 16:43Summary
Security update for wicked
Severity
Important
Notes
Title of the patch: Security update for wicked
Description of the patch: This update for wicked fixes the following issues:
Update to version 0.6.79.
- CVE-2026-44932: indirect remote shell command injection due to insufficient sanitization of DHCP options written to
`/run/wicked/leaseinfo.*` files (bsc#1265221).
- CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing
(bsc#1274627).
- CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyond provided allocation in DHCPv4
capture parsing (bsc#1274627).
Changes for wicked:
- Version 0.6.79:
- Fix to escape single-quotes in leaseinfo dump output used by the `wicked test dhcp4` and `wicked test dhcp6` and
written to the `/run/wicked/leaseinfo.*` files, e.g. to pass them to `netconfig`.
- Fix `posix-tz-dbname` and `tz-string` option processing checks to permit only valid characters according to
RFC4833.
- Discard string values containing single-quotes in other options.
- Trigger to regenerate `initrd` that may contain wicked binaries on updates from wicked versions <= 0.6.78.
- Version 0.6.78:
- `man`: small fixes in wireless manpage (gh#opensuse/wicked#1053)
- `rtnetlink`: fix `RTM_NEWLINK` name resolution in debug (gh#opensuse/wicked#1052)
- Add support for IPVLAN/IPVTAP (jsc#PED-1942, gh#opensuse/wicked#1050, gh#opensuse/wicked#1051)
- `fsm`: remove children reference array from worker (gh#opensuse/wicked#1049)
- `ifxml`: migrate and generate lower configs/policies (gh#opensuse/wicked#1048)
- `fsm`: use refcount and array macros in worker and policy (gh#opensuse/wicked#1047)
- `route`: use refcounted array and fix error leaks (gh#opensuse/wicked#1046)
- `utils`: add support for refcounted objects in generic array (gh#openSUSE/wicked#1045)
Patchnames: SUSE-2026-3840,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3840,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3840
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.8 (High)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
36 products, the same list as for
CVE-2026-44932
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
36 products, the same list as for
CVE-2026-44932
Threats
Impact
important
References
15 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for wicked",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for wicked fixes the following issues:\n\nUpdate to version 0.6.79.\n\n- CVE-2026-44932: indirect remote shell command injection due to insufficient sanitization of DHCP options written to\n `/run/wicked/leaseinfo.*` files (bsc#1265221).\n- CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing \n (bsc#1274627).\n- CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyond provided allocation in DHCPv4\n capture parsing (bsc#1274627).\n\nChanges for wicked:\n\n- Version 0.6.79:\n - Fix to escape single-quotes in leaseinfo dump output used by the `wicked test dhcp4` and `wicked test dhcp6` and\n written to the `/run/wicked/leaseinfo.*` files, e.g. to pass them to `netconfig`.\n - Fix `posix-tz-dbname` and `tz-string` option processing checks to permit only valid characters according to\n RFC4833.\n - Discard string values containing single-quotes in other options.\n - Trigger to regenerate `initrd` that may contain wicked binaries on updates from wicked versions \u003c= 0.6.78.\n- Version 0.6.78:\n - `man`: small fixes in wireless manpage (gh#opensuse/wicked#1053)\n - `rtnetlink`: fix `RTM_NEWLINK` name resolution in debug (gh#opensuse/wicked#1052)\n - Add support for IPVLAN/IPVTAP (jsc#PED-1942, gh#opensuse/wicked#1050, gh#opensuse/wicked#1051)\n - `fsm`: remove children reference array from worker (gh#opensuse/wicked#1049)\n - `ifxml`: migrate and generate lower configs/policies (gh#opensuse/wicked#1048)\n - `fsm`: use refcount and array macros in worker and policy (gh#opensuse/wicked#1047)\n - `route`: use refcounted array and fix error leaks (gh#opensuse/wicked#1046)\n - `utils`: add support for refcounted objects in generic array (gh#openSUSE/wicked#1045)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-3840,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3840,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3840",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3840-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:3840-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20263840-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:3840-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028624.html"
},
{
"category": "self",
"summary": "SUSE Bug 1265221",
"url": "https://bugzilla.suse.com/1265221"
},
{
"category": "self",
"summary": "SUSE Bug 1274627",
"url": "https://bugzilla.suse.com/1274627"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-44932 page",
"url": "https://www.suse.com/security/cve/CVE-2026-44932/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-71401 page",
"url": "https://www.suse.com/security/cve/CVE-2026-71401/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-71402 page",
"url": "https://www.suse.com/security/cve/CVE-2026-71402/"
}
],
"title": "Security update for wicked",
"tracking": {
"current_release_date": "2026-09-17T16:43:54Z",
"generator": {
"date": "2026-08-27T12:21:23Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:3840-1",
"initial_release_date": "2026-08-27T12:21:23Z",
"revision_history": [
{
"date": "2026-08-27T12:21:23Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T19:50:08Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T20:53:07Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-17T16:43:54Z",
"number": "4",
"summary": "unknown changes"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "wicked-0:0.6.79-150600.11.20.1.aarch64",
"product": {
"name": "wicked-0:0.6.79-150600.11.20.1.aarch64",
"product_id": "wicked-0:0.6.79-150600.11.20.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked@0.6.79-150600.11.20.1?arch=aarch64\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"product": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"product_id": "wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked-nbft@0.6.79-150600.11.20.1?arch=aarch64\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"product": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"product_id": "wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked-service@0.6.79-150600.11.20.1?arch=aarch64\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "wicked-0:0.6.79-150600.11.20.1.i586",
"product": {
"name": "wicked-0:0.6.79-150600.11.20.1.i586",
"product_id": "wicked-0:0.6.79-150600.11.20.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked@0.6.79-150600.11.20.1?arch=i586\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.i586",
"product": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.i586",
"product_id": "wicked-nbft-0:0.6.79-150600.11.20.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked-nbft@0.6.79-150600.11.20.1?arch=i586\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wicked-service-0:0.6.79-150600.11.20.1.i586",
"product": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.i586",
"product_id": "wicked-service-0:0.6.79-150600.11.20.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked-service@0.6.79-150600.11.20.1?arch=i586\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "wicked-0:0.6.79-150600.11.20.1.ppc64le",
"product": {
"name": "wicked-0:0.6.79-150600.11.20.1.ppc64le",
"product_id": "wicked-0:0.6.79-150600.11.20.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked@0.6.79-150600.11.20.1?arch=ppc64le\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"product": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"product_id": "wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked-nbft@0.6.79-150600.11.20.1?arch=ppc64le\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"product": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"product_id": "wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked-service@0.6.79-150600.11.20.1?arch=ppc64le\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "wicked-0:0.6.79-150600.11.20.1.s390x",
"product": {
"name": "wicked-0:0.6.79-150600.11.20.1.s390x",
"product_id": "wicked-0:0.6.79-150600.11.20.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked@0.6.79-150600.11.20.1?arch=s390x\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"product": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"product_id": "wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked-nbft@0.6.79-150600.11.20.1?arch=s390x\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wicked-service-0:0.6.79-150600.11.20.1.s390x",
"product": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.s390x",
"product_id": "wicked-service-0:0.6.79-150600.11.20.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked-service@0.6.79-150600.11.20.1?arch=s390x\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "wicked-0:0.6.79-150600.11.20.1.x86_64",
"product": {
"name": "wicked-0:0.6.79-150600.11.20.1.x86_64",
"product_id": "wicked-0:0.6.79-150600.11.20.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked@0.6.79-150600.11.20.1?arch=x86_64\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"product": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"product_id": "wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked-nbft@0.6.79-150600.11.20.1?arch=x86_64\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"product": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"product_id": "wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:opensuse:wicked:0.6.79:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/wicked-service@0.6.79-150600.11.20.1?arch=x86_64\u0026upstream=wicked-0:0.6.79-150600.11.20.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6",
"product_id": "SUSE Linux Enterprise Server 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-0:0.6.79-150600.11.20.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.aarch64"
},
"product_reference": "wicked-0:0.6.79-150600.11.20.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-0:0.6.79-150600.11.20.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.ppc64le"
},
"product_reference": "wicked-0:0.6.79-150600.11.20.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-0:0.6.79-150600.11.20.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.s390x"
},
"product_reference": "wicked-0:0.6.79-150600.11.20.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-0:0.6.79-150600.11.20.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.x86_64"
},
"product_reference": "wicked-0:0.6.79-150600.11.20.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64"
},
"product_reference": "wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le"
},
"product_reference": "wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.s390x"
},
"product_reference": "wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64"
},
"product_reference": "wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.aarch64"
},
"product_reference": "wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.ppc64le"
},
"product_reference": "wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.s390x"
},
"product_reference": "wicked-service-0:0.6.79-150600.11.20.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.x86_64"
},
"product_reference": "wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-0:0.6.79-150600.11.20.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64"
},
"product_reference": "wicked-0:0.6.79-150600.11.20.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-0:0.6.79-150600.11.20.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le"
},
"product_reference": "wicked-0:0.6.79-150600.11.20.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-0:0.6.79-150600.11.20.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x"
},
"product_reference": "wicked-0:0.6.79-150600.11.20.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-0:0.6.79-150600.11.20.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64"
},
"product_reference": "wicked-0:0.6.79-150600.11.20.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64"
},
"product_reference": "wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le"
},
"product_reference": "wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x"
},
"product_reference": "wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64"
},
"product_reference": "wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64"
},
"product_reference": "wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le"
},
"product_reference": "wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x"
},
"product_reference": "wicked-service-0:0.6.79-150600.11.20.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64"
},
"product_reference": "wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-0:0.6.79-150600.11.20.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64"
},
"product_reference": "wicked-0:0.6.79-150600.11.20.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-0:0.6.79-150600.11.20.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le"
},
"product_reference": "wicked-0:0.6.79-150600.11.20.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-0:0.6.79-150600.11.20.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x"
},
"product_reference": "wicked-0:0.6.79-150600.11.20.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-0:0.6.79-150600.11.20.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64"
},
"product_reference": "wicked-0:0.6.79-150600.11.20.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64"
},
"product_reference": "wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le"
},
"product_reference": "wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x"
},
"product_reference": "wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-nbft-0:0.6.79-150600.11.20.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64"
},
"product_reference": "wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64"
},
"product_reference": "wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le"
},
"product_reference": "wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x"
},
"product_reference": "wicked-service-0:0.6.79-150600.11.20.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "wicked-service-0:0.6.79-150600.11.20.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64"
},
"product_reference": "wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-44932",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-44932"
}
],
"notes": [
{
"category": "general",
"text": "Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-44932",
"url": "https://www.suse.com/security/cve/CVE-2026-44932"
},
{
"category": "external",
"summary": "SUSE Bug 1265221 for CVE-2026-44932",
"url": "https://bugzilla.suse.com/1265221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-27T12:21:23Z",
"details": "important"
}
],
"title": "CVE-2026-44932"
},
{
"cve": "CVE-2026-71401",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-71401"
}
],
"notes": [
{
"category": "general",
"text": "An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total length field (ip_len) is at least as large as the IP header length (ihl) before subtracting the header length. An unauthenticated attacker on the same network can thereby trigger an out-of-bounds read past the receive buffer in the wicked DHCPv4 client (wickedd-dhcp4), which can crash the daemon depending on the process memory layout. No information disclosure has been demonstrated. This issue affects wicked up to and including version 0.6.80.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-71401",
"url": "https://www.suse.com/security/cve/CVE-2026-71401"
},
{
"category": "external",
"summary": "SUSE Bug 1274627 for CVE-2026-71401",
"url": "https://bugzilla.suse.com/1274627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-27T12:21:23Z",
"details": "important"
}
],
"title": "CVE-2026-71401"
},
{
"cve": "CVE-2026-71402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-71402"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option walker in the DHCPv4 client (wickedd-dhcp4) reads up to ihl + 8 bytes - at most 68 bytes - past the end of the 1500-byte packet receive buffer. An unauthenticated attacker on the same network who sends a crafted DHCP/UDP packet can make the client parse adjacent heap memory as DHCP options, so that heap contents such as allocator metadata or pointer values can be interpreted into lease fields. The over-read is bounded to 68 bytes; no memory write, no attacker control over the adjacent bytes and no remote exfiltration primitive has been demonstrated. This issue affects wicked up to and including version 0.6.80.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-71402",
"url": "https://www.suse.com/security/cve/CVE-2026-71402"
},
{
"category": "external",
"summary": "SUSE Bug 1274627 for CVE-2026-71402",
"url": "https://bugzilla.suse.com/1274627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-nbft-0:0.6.79-150600.11.20.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:wicked-service-0:0.6.79-150600.11.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-27T12:21:23Z",
"details": "important"
}
],
"title": "CVE-2026-71402"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…