pkg:Debian/isc-kea

All known vulnerabilities

• HIGH7.8CVE-2025-32801Kea configuration and API directives can be used to load a malicious hook library.
  from 0
• HIGH7.5CVE-2026-3608Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket…
  from 0
• HIGH7.5CVE-2025-40779If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the `kea-dhcp4`…
  from 0
• MEDIUM6.5A missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage contains leases whic…
  from 0, < 1.7.5-1
• MEDIUM6.5An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process (kea-dhcp4), causing the server process to exi…
  from 0, < 1.7.5-1
• MEDIUM6.5A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an assertion failure.
  from 0, < 1.7.5-1
• MEDIUM6.1Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea.
  from 0
• MEDIUM4.0In some cases, Kea log files or lease files may be world-readable.
  from 0