Skip to content
OpenAdvisories
High ELSA-2026-7342 1 CVE

Important: kea security update (Oracle Linux 10)

Published Apr 10, 2026 · Updated Apr 10, 2026

Ecosystem: Oracle Linux

Summary

[3.0.1-3]
- Fixes CVE-2026-3608

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 10 kea 0:3.0.1-3.el10_1
Oracle Linux · 10 kea-doc 0:3.0.1-3.el10_1
Oracle Linux · 10 kea-hooks 0:3.0.1-3.el10_1
Oracle Linux · 10 kea-keama 0:3.0.1-3.el10_1
Oracle Linux · 10 kea-libs 0:3.0.1-3.el10_1

Vulnerabilities 1

  • High 7.5
    CVE-2026-3608

    Stack overflow in Kea daemons

    Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0…

    ISC Kea isc-kea kea Debian Ubuntu Alpine