CVE-2020-7216: Missing Release of Memory after Effective Lifetime

An nidhcp4parseresponse memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option...

openSUSE: Security Advisory for wicked (openSUSE-SU-2020:0165-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0165-1 Security update for wicked

This update for wicked fixes the following issues: - CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options bsc1160903. - CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 bsc1160905...

Security update for wicked (important)

openSUSE Security Update: Security update for wicked Announcement ID: openSUSE-SU-2020:0165-1 Rating: important References: 1160903 1160905 Cross-References: CVE-2019-18902 CVE-2020-7216 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...

SUSE SLED15 / SLES15 Security Update : wicked (SUSE-SU-2020:0264-1)

This update for wicked fixes the following issues : CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options bsc1160903. CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 bsc1160905. Not...

SUSE SLED15 / SLES15 Security Update : wicked (SUSE-SU-2020:0263-1)

This update for wicked fixes the following issues : CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options bsc1160903. CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 bsc1160905. Not...

SUSE-SU-2020:0264-1 Security update for wicked

This update for wicked fixes the following issues: - CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options bsc1160903. - CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 bsc1160905...

SUSE-SU-2020:0263-1 Security update for wicked

This update for wicked fixes the following issues: - CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options bsc1160903. - CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 bsc1160905...

PT-2020-19470

Name of the Vulnerable Software and Affected Versions openSUSE wicked versions 0.6.55 and earlier Description A memory leak in the ni dhcp4 parse response function allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option. This issue can be...

PT-2020-10010

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-3.5.1 SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-3.21.1 openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.6.1 openSUSE Factory wicked versions prior ...

wicked-saml (>=0.10.0, <=0.11.3) potentially affected by CVE-2017-11429 via saml2-js (1.10.0)

saml2-js NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on saml2-js and may be impacted: - wicked-saml =0.10.0, =0.11.3 Source cves: CVE-2017-11429 Source advisory: GHSA-5P5W-J3G7-W4WV...

wicked-saml (>=0.10.0, <=0.11.3) potentially affected by CVE-2017-11429 via saml2-js (1.10.0)

saml2-js NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on saml2-js and may be impacted: - wicked-saml =0.10.0, =0.11.3 Source cves: CVE-2017-11429 Source advisory: OSV:GHSA-5P5W-J3G7-W4WV...

wicked-saml (>=0.10.0, <=0.11.3) potentially affected by CVE-2017-11429 via saml2-js (1.10.0)

saml2-js NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on saml2-js and may be impacted: - wicked-saml =0.10.0, =0.11.3 Source cves: CVE-2017-11429 Source advisory: MEND:CVE-2017-11429...

Fedora 27 : php-horde-wicked (2017-346d6e00dd)

wicked 2.0.8 - jan SECURITY: Fix unauthorized access to page attachments. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

GHSA-RPRJ-G6XC-P5GQ Wicked gem contains Path traversal vulnerability

The Wicked gem prior to v1.0.1 allows a remote attacker to traverse directories on the system via a vulnerability in controller/concerns/renderredirect.rb. An attacker can send a specially-crafted URL request containing %2E%2E%2F directory traversal sequences to read arbitrary files on the system...

Wicked gem contains Path traversal vulnerability

The Wicked gem prior to v1.0.1 allows a remote attacker to traverse directories on the system via a vulnerability in controller/concerns/renderredirect.rb. An attacker can send a specially-crafted URL request containing %2E%2E%2F directory traversal sequences to read arbitrary files on the system...

Fedora Update for php-horde-wicked FEDORA-2017-3ab0ac4a6a

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-horde-wicked FEDORA-2017-037e1b31a0

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : php-horde-wicked (2017-037e1b31a0)

wicked 2.0.8 - jan SECURITY: Fix unauthorized access to page attachments. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

com.cooldatasoft:wicket-menu (>=6.20.0.0, <=6.20.0.4), com.cooldatasoft:wicket-menu-demo (>=6.20.0.0, <=6.20.0.4) +403 more potentially affected by CVE-2016-6806 via org.apache.wicket:wicket-core (>=6.20.0, <=6.24.0)

org.apache.wicket:wicket-core MAVEN version =6.20.0, =6.20.0.0, =6.20.0.0, =2.0.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0, =6.24.0 and more Source cves: CVE-2016-6806 Source advisory: MEND:CVE-2016-6806...