An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process (kea-dhcp4), causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade kea | Aug 22, 2024 | Oct 16, 2019 |
| Debian | — | Upgrade isc-kea | Jul 30, 2024 | Oct 16, 2019 |
| Freebsd | — | Upgrade kea | Sep 21, 2019 | Sep 20, 2019 |
| Ubuntu | — | Upgrade kea-common (Ubuntu Pro)Upgrade kea-dhcp-ddns-server (Ubuntu Pro)Upgrade kea-dhcp6-server (Ubuntu Pro)Upgrade kea-admin (Ubuntu Pro)Upgrade kea-dhcp4-server (Ubuntu Pro) | Jun 26, 2025 | Oct 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub