KE
Product
Kea
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 3Low 0
Watch
Add Kea to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3608 | 7.5 | Mar 25 | Stack overflow in Kea daemons Affected: 2.6.0 through 2.6.4; 3.0.0 through 3.0.2 |
| CVE-2025-40779 | 7.5 | Aug 27 | Kea crash upon interaction between specific client options and subnet selection Affected: 2.7.1 through 2.7.9; 3.0.0; 3.1.0 |
| CVE-2018-5739 | 7.5 | Jan 16 | Failure to release memory may exhaust system resources Affected: 1.4.0 |
| CVE-2015-8373 | 6.8 | Dec 22 | The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow remote attackers to cause a denial of service (daemon crash)… Affected: 0.9.2; 1.0.0 |
| CVE-2019-6474 | 6.5 | Oct 16 | A missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage contains leases which are rejected as invalid when the… Affected: 1.4.0 through 1.5.0; 1.6.0; 1.6.0 |
| CVE-2019-6472 | 6.5 | Oct 16 | A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an assertion failure Affected: 1.4.0 through 1.5.0; 1.6.0; 1.6.0 |
Showing 6