Suse Wicked vulnerabilities

CVE-2026-44932 [HIGH] CWE-78 CVE-2026-44932: Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 co Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine.

CVE-2026-71402 [MEDIUM] CWE-125 CVE-2026-71402: An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_ An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option walker in the DHCPv4 client (wickedd-dhcp4) reads up to ihl + 8 bytes — at most 68 bytes — pa

CVE-2026-71401 [MEDIUM] CWE-191 CVE-2026-71401: An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_h An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total length field (ip_len) is at least as large as the IP header length (ihl) before subtracting the header length. An unauthenticated attacker on the same network can thereby trigger an out-of-bou