Advisories · Technology
ISC Kea.
Every CVE that names ISC Kea among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Stack overflow in Kea daemons
- ISC Kea
- Denial of service
- CVSS 7.5 High
Invalid characters cause assert
- ISC Kea
- CWE-823
- CVSS 7.5 High
Kea crash upon interaction between specific client options and subnet selection
- ISC Kea
- Memory corruption
- CVSS 4.0 Medium
Insecure file permissions can result in confidential information leakage
- ISC Kea
- Broken access control
- CVSS 6.1 Medium
Insecure handling of file paths allows multiple local attacks
- ISC Kea
- Path traversal
- CWE-379
- CVSS 7.8 High
Loading a malicious hook library can lead to local privilege escalation
- ISC Kea
- Code injection
- CVSS 5.7 Medium
A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate
- ISC Kea
- CVSS 6.5 Medium
A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate
- ISC Kea
- CVSS 6.5 Medium
A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate
- ISC Kea