Skip to content
OpenAdvisories

Package · Alpine

kea

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • High 7.5
    CVE-2026-3608

    Stack overflow in Kea daemons

    Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0…

    ISC Kea isc-kea kea Debian Ubuntu Alpine
  • Medium 4.0
    CVE-2025-32803

    Insecure file permissions can result in confidential information leakage

    In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

    ISC Kea kea isc-kea Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2025-32802

    Insecure handling of file paths allows multiple local attacks

    Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure pat…

    ISC Kea isc-kea kea Debian Ubuntu Alpine
  • High 7.8
    CVE-2025-32801

    Loading a malicious hook library can lead to local privilege escalation

    Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions…

    ISC Kea isc-kea kea Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2019-6472

    A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate

    A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an assertion failure. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2.

    ISC Kea kea isc-kea Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2019-6473

    A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate

    An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process (kea-dhcp4), causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2.

    ISC Kea isc-kea kea Debian Ubuntu Alpine
  • Medium 5.7
    CVE-2019-6474

    A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate

    A missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage contains leases which are rejected as invalid when the server tries to load leases from storage on restart. If the number of such leases exc…

    ISC Kea kea isc-kea Debian Ubuntu Alpine