CVE-2019-18903: Opensuse Leap

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-2.18.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-28.26.1. openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.9.1. openSUSE Factory wicked versions prior to 0.6.62.

Affected products

• Opensuse Leap: version 15.1 only
• Suse Linux Enterprise Server: version 12 only; version 15 only

Published 2020-03-02. Last modified 2026-06-17.