Skip to content
OpenAdvisories

Package · Alpine

kea

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-3608

    Stack overflow in Kea daemons

    Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0…

    ISC Kea isc-kea kea Debian Ubuntu Alpine
  • High 7.8
    CVE-2025-32801

    Loading a malicious hook library can lead to local privilege escalation

    Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions…

    ISC Kea kea isc-kea Debian Ubuntu Alpine