CVE-2020-7216

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00005.htmlMailing List, Vendor Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1160905Issue Tracking, Permissions Required, Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00005.htmlMailing List, Vendor Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1160905Issue Tracking, Permissions Required, Vendor Advisory

Timeline

Published: Feb 5, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-72177.5An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service CVE-2020-72187.5HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticate CVE-2020-72197.5HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticat CVE-2020-72207.5HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic secrets for a mount in a deleted namespac CVE-2020-72217.8mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod a CVE-2020-72225.3An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with JavaScript when one CVE-2020-72249.8The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued val CVE-2020-72267.5CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocatio CVE-2020-72276.5Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrie CVE-2020-72285.4The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms.CVE-2020-72299.8An issue was discovered in Simplejobscript.com SJS before 1.65. There is unauthenticated SQL injection via the search engine. The parameter CVE-2020-72315.3Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is valid.