KE
Product
Kea
10
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 5Low 0
Watch
Add Kea to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-32801 | 7.8 | May 28 | Loading a malicious hook library can lead to local privilege escalation Affected: 2.4.0 through 2.4.1; 2.6.0 through 2.6.2; 2.7.0 through 2.7.8 |
| CVE-2026-3608 | 7.5 | Mar 25 | Stack overflow in Kea daemons Affected: 2.6.0 through 2.6.4; 3.0.0 through 3.0.2 |
| CVE-2025-11232 | 7.5 | Oct 29 | Invalid characters cause assert Affected: 3.0.1 through 3.0.1; 3.1.1 through 3.1.2 |
| CVE-2025-40779 | 7.5 | Aug 27 | Kea crash upon interaction between specific client options and subnet selection Affected: 2.7.1 through 2.7.9; 3.0.0; 3.1.0 |
| CVE-2018-5739 | 7.5 | Jan 16 | Failure to release memory may exhaust system resources Affected: 1.4.0 |
| CVE-2015-8373 | 6.8 | Dec 22 | The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow remote attackers to cause a denial of service (daemon crash)… Affected: 0.9.2; 1.0.0 |
| CVE-2019-6474 | 6.5 | Oct 16 | A missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage contains leases which are rejected as invalid when the… Affected: 1.4.0 through 1.5.0; 1.6.0; 1.6.0 |
| CVE-2019-6472 | 6.5 | Oct 16 | A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an assertion failure Affected: 1.4.0 through 1.5.0; 1.6.0; 1.6.0 |
| CVE-2025-32802 | 6.1 | May 28 | Insecure handling of file paths allows multiple local attacks Affected: 2.4.0 through 2.4.1; 2.6.0 through 2.6.2; 2.7.0 through 2.7.8 |
| CVE-2025-32803 | 4.0 | May 28 | Insecure file permissions can result in confidential information leakage Affected: 2.4.0 through 2.4.1; 2.6.0 through 2.6.2; 2.7.0 through 2.7.8 |
Showing 10