In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade kea | Aug 8, 2025 | May 28, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 28, 2025 |
| Debian | — | Upgrade isc-kea | May 30, 2025 | May 28, 2025 |
| Freebsd | — | Upgrade kea | May 30, 2025 | May 28, 2025 |
| Oracle_linux | — | Upgrade kea-docUpgrade keaUpgrade kea-hooksUpgrade kea-libsUpgrade kea-keama | Jul 10, 2025 | May 28, 2025 |
| Redhat_linux | — | Upgrade kea-docUpgrade kea-libsUpgrade kea-debugsourceUpgrade kea-keama-debuginfoUpgrade kea-hooksUpgrade kea-debuginfoUpgrade kea-libs-debuginfoUpgrade kea-hooks-debuginfoUpgrade keaUpgrade kea-keama | Jan 27, 2026 | May 28, 2025 |
| Rocky_linux | — | Upgrade kea-hooks-debuginfoUpgrade keaUpgrade kea-libsUpgrade kea-debugsourceUpgrade kea-keamaUpgrade kea-debuginfoUpgrade kea-libs-debuginfoUpgrade kea-hooksUpgrade kea-keama-debuginfo | Oct 8, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade kea-hooksUpgrade libkea-dhcp_ddns68Upgrade libkea-cfgrpt3Upgrade libkea-dhcpsrv129Upgrade libkea-d2srv63Upgrade libkea-database76Upgrade libkea-config83Upgrade libkea-dhcp109Upgrade python3-keaUpgrade libkea-cryptolink63Upgrade libkea-process90Upgrade libkea-dns71Upgrade libkea-eval84Upgrade libkea-tcp33Upgrade libkea-log-interprocess3Upgrade libkea-hooks118Upgrade libkea-asiolink87Upgrade keaUpgrade libkea-exceptions45Upgrade libkea-util-io12Upgrade libkea-cc82Upgrade libkea-stats53Upgrade libkea-util101Upgrade kea-docUpgrade libkea-mysql88Upgrade libkea-asiodns62Upgrade libkea-http87Upgrade kea-develUpgrade libkea-pgsql88Upgrade libkea-log75 | Dec 5, 2025 | May 31, 2025 |
| Ubuntu | — | Upgrade isc-kea | Oct 30, 2025 | May 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub