To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "[^A-Za-z0-9.-]"; "hostname-char-replacement" must be empty (the default); and "ddns-qualifying-suffix" must *NOT* be empty (the default is empty). DDNS updates do not need to be enabled for this issue to manifest. A client that sends certain option content would then cause kea-dhcp4 to exit unexpectedly. This issue affects Kea versions 3.0.1 through 3.0.1 and 3.1.1 through 3.1.2.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade keaUpgrade kea-devel | Dec 10, 2025 | Oct 29, 2025 |
| Oracle_linux | — | Upgrade keaUpgrade kea-keamaUpgrade kea-libsUpgrade kea-hooksUpgrade kea-doc | Dec 5, 2025 | Oct 29, 2025 |
| Redhat_linux | — | Upgrade keaUpgrade kea-hooks-debuginfoUpgrade kea-hooksUpgrade kea-keamaUpgrade kea-keama-debuginfoUpgrade kea-libs-debuginfoUpgrade kea-debuginfoUpgrade kea-libsUpgrade kea-debugsourceUpgrade kea-devel-debuginfoUpgrade kea-doc | Jan 27, 2026 | Oct 29, 2025 |
| Rocky_linux | — | Upgrade kea-libs-debuginfoUpgrade kea-debugsourceUpgrade kea-libsUpgrade kea-keama-debuginfoUpgrade kea-hooks-debuginfoUpgrade kea-debuginfoUpgrade keaUpgrade kea-keamaUpgrade kea-hooks | Feb 5, 2026 | Nov 21, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub