Skip to content
OpenAdvisories
High RHSA-2025:9178 3 CVEs

Red Hat Security Advisory: kea security update

Published Jun 18, 2025 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.0 kea 0:2.6.3-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kea-debuginfo 0:2.6.3-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kea-debugsource 0:2.6.3-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kea-doc 0:2.6.3-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kea-hooks 0:2.6.3-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kea-hooks-debuginfo 0:2.6.3-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kea-keama 0:2.6.3-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kea-keama-debuginfo 0:2.6.3-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kea-libs 0:2.6.3-1.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 kea-libs-debuginfo 0:2.6.3-1.el10_0

Vulnerabilities 3

  • High 7.8
    CVE-2025-32801

    Loading a malicious hook library can lead to local privilege escalation

    Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions…

    ISC Kea isc-kea kea Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2025-32802

    Insecure handling of file paths allows multiple local attacks

    Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure pat…

    ISC Kea isc-kea kea Debian Ubuntu Alpine
  • Medium 4.0
    CVE-2025-32803

    Insecure file permissions can result in confidential information leakage

    In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

    ISC Kea kea isc-kea Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2366362
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2367495
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2367496
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9178.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-32801
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-32801
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-32801
  • report
    https://access.redhat.com/security/cve/CVE-2025-32802
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-32802
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-32802
  • report
    https://access.redhat.com/security/cve/CVE-2025-32803
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-32803
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-32803
  • article
    https://kb.isc.org/docs/cve-2025-32803