CVE-2026-44932

{
  "id": "CVE-2026-44932",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-16T17:16:40.953",
  "lastModified": "2026-10-25T23:10:00.167",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine."
    },
    {
      "lang": "es",
      "value": "Paso de cadenas no saneadas desde respuestas DHCP al cliente dhcp wicked antes de wicked 0.6.79 podría ser utilizado por atacantes que operan un servidor DHCP malicioso para ejecutar código en la máquina local."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "SUSE",
          "product": "wicked",
          "defaultStatus": "unaffected",
          "collectionURL": "https://github.com/openSUSE/wicked",
          "packageName": "wicked",
          "modules": [
            "dhcp handling"
          ],
          "repo": "https://github.com/openSUSE/wicked",
          "versions": [
            {
              "version": "0",
              "lessThan": "0.6.79",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-17T00:00:00+00:00",
          "id": "CVE-2026-44932",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://bugzilla.suse.com/show_bug.cgi?id=1265221",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/openSUSE/wicked/releases/tag/version-0.6.79",
      "source": "[email protected]"
    },
    {
      "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026688.html",
      "source": "[email protected]"
    },
    {
      "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026689.html",
      "source": "[email protected]"
    },
    {
      "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026690.html",
      "source": "[email protected]"
    },
    {
      "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026691.html",
      "source": "[email protected]"
    }
  ]
}