The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade kea | Aug 8, 2025 | May 28, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 28, 2025 |
| Debian | — | Upgrade isc-kea | May 30, 2025 | May 28, 2025 |
| Freebsd | — | Upgrade kea | May 30, 2025 | May 28, 2025 |
| Oracle_linux | — | Upgrade keaUpgrade kea-hooksUpgrade kea-keamaUpgrade kea-libsUpgrade kea-doc | Jul 10, 2025 | May 28, 2025 |
| Redhat_linux | — | Upgrade kea-keama-debuginfoUpgrade kea-debugsourceUpgrade keaUpgrade kea-docUpgrade kea-hooksUpgrade kea-keamaUpgrade kea-debuginfoUpgrade kea-libsUpgrade kea-libs-debuginfoUpgrade kea-hooks-debuginfo | Jan 27, 2026 | May 28, 2025 |
| Rocky_linux | — | Upgrade kea-keama-debuginfoUpgrade kea-libsUpgrade kea-debugsourceUpgrade kea-hooks-debuginfoUpgrade kea-hooksUpgrade kea-keamaUpgrade kea-libs-debuginfoUpgrade keaUpgrade kea-debuginfo | Oct 8, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade libkea-process90Upgrade kea-hooksUpgrade libkea-exceptions45Upgrade libkea-util101Upgrade libkea-dns71Upgrade libkea-cfgrpt3Upgrade libkea-asiolink87Upgrade libkea-log-interprocess3Upgrade kea-develUpgrade libkea-asiodns62Upgrade libkea-d2srv63Upgrade libkea-database76Upgrade libkea-eval84Upgrade kea-docUpgrade keaUpgrade libkea-dhcp109Upgrade libkea-cryptolink63Upgrade libkea-log75Upgrade python3-keaUpgrade libkea-cc82Upgrade libkea-config83Upgrade libkea-mysql88Upgrade libkea-pgsql88Upgrade libkea-tcp33Upgrade libkea-dhcp_ddns68Upgrade libkea-http87Upgrade libkea-hooks118Upgrade libkea-util-io12Upgrade libkea-dhcpsrv129Upgrade libkea-stats53 | Dec 5, 2025 | May 31, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub