Skip to content
OpenAdvisories
Medium WID-SEC-2025-2568 2 CVEs

Red Hat Enterprise Linux (kea): Mehrere Schwachstellen ermöglichen Denial of Service

Published Nov 11, 2025 · Updated Apr 9, 2026 · Revision 5 · de-DE

Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Product: Enterprise Linux Product: Linux Product: Linux Product: openSUSE Product: Rocky Linux Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 2

  • High 7.5
    CVE-2025-11232

    Invalid characters cause assert

    To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "[^A-Za-z0-9.-]"; "hostname-char-replacement" must be empty (the default); and "ddns-qualifying-suffix" must *N…

    ISC Kea
  • High 7.5
    CVE-2025-40779

    Kea crash upon interaction between specific client options and subnet selection

    If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the `kea-dhcp4` process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadc…

    ISC Kea

Revision history

  1. #5

    Neue Updates von SUSE aufgenommen

  2. #4

    Neue Updates von openSUSE aufgenommen

  3. #3

    Neue Updates von Oracle Linux aufgenommen

  4. #2

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  5. #1

    Initiale Fassung

References