fr Sign in

4.0 Medium

CVE-2025-32803 In some cases, Kea log files or lease files may be world-readable

Description

In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

Affected products and versions

Product	Affected versions	Fixed in
Kea 2.7	2.7.0 → 2.7.8	No fix stated
Kea 2.6	2.6.0 → 2.6.2	No fix stated
Kea 2.4	2.4.0 → 2.4.1	No fix stated

References

CVE-2025-32803 kb.isc.org

Timeline

Published May 28, 2025
Last modified May 28, 2025

The 9 CVEs of Kea →

CVE-2026-3608 Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any… 7.5 High CVE-2025-11232 To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at… 7.5 High CVE-2025-40779 If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the… 7.5 High CVE-2025-32802 Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea 6.1 Medium

Track this CVE