6.5
Medium
CVE-2019-6472 A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an assertion…
Description
A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an assertion failure. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kea 1.6 | 1.6.0-beta1 → 1.6.0-beta2 | No fix stated |
Other CVEs of Kea
The 9 CVEs of Kea →
CVE-2026-3608
Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any…
7.5
High
CVE-2025-11232
To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at…
7.5
High
CVE-2025-40779
If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the…
7.5
High
CVE-2025-32803
In some cases, Kea log files or lease files may be world-readable
4.0
Medium