CVE-2026-44932

{"id": "CVE-2026-44932", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-44932", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-17T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "meissner@suse.de", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "meissner@suse.de", "affectedData": [{"repo": "https://github.com/openSUSE/wicked", "vendor": "SUSE", "modules": ["dhcp handling"], "product": "wicked", "versions": [{"status": "affected", "version": "0", "lessThan": "0.6.79", "versionType": "semver"}], "packageName": "wicked", "collectionURL": "https://github.com/openSUSE/wicked", "defaultStatus": "unaffected"}]}], "published": "2026-06-16T17:16:40.953", "references": [{"url": "https://bugzilla.suse.com/show_bug.cgi?id=1265221", "source": "meissner@suse.de"}, {"url": "https://github.com/openSUSE/wicked/releases/tag/version-0.6.79", "source": "meissner@suse.de"}, {"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026688.html", "source": "meissner@suse.de"}, {"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026689.html", "source": "meissner@suse.de"}, {"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026690.html", "source": "meissner@suse.de"}, {"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026691.html", "source": "meissner@suse.de"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "meissner@suse.de", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine."}, {"lang": "es", "value": "Paso de cadenas no saneadas desde respuestas DHCP al cliente dhcp wicked antes de wicked 0.6.79 podr\u00eda ser utilizado por atacantes que operan un servidor DHCP malicioso para ejecutar c\u00f3digo en la m\u00e1quina local."}], "lastModified": "2026-10-25T23:10:00.167", "sourceIdentifier": "meissner@suse.de"}