Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade kea | May 25, 2026 | Mar 25, 2026 |
| Debian | — | Upgrade isc-kea | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kea-docUpgrade kea-libsUpgrade kea-keamaUpgrade kea-hooksUpgrade kea | Apr 22, 2026 | Mar 25, 2026 |
| Redhat_linux | — | Upgrade kea-keamaUpgrade kea-debuginfoUpgrade kea-devel-debuginfoUpgrade kea-hooksUpgrade kea-docUpgrade kea-keama-debuginfoUpgrade kea-libsUpgrade kea-debugsourceUpgrade kea-libs-debuginfoUpgrade kea-hooks-debuginfoUpgrade kea | Apr 13, 2026 | Mar 25, 2026 |
| Rocky_linux | — | Upgrade kea-keamaUpgrade kea-libsUpgrade kea-hooksUpgrade kea-hooks-debuginfoUpgrade kea-libs-debuginfoUpgrade kea-debugsourceUpgrade keaUpgrade kea-keama-debuginfoUpgrade kea-debuginfo | Apr 13, 2026 | Apr 11, 2026 |
| Suse | — | Upgrade libkea-http87Upgrade libkea-dhcp_ddns57Upgrade libkea-stats41Upgrade libkea-util102Upgrade libkea-stats53Upgrade libkea-dhcpsrv131Upgrade libkea-util-io0Upgrade kea-docUpgrade libkea-util-io12Upgrade libkea-hooks121Upgrade libkea-cfgrpt3Upgrade libkea-dhcp_ddns68Upgrade libkea-d2srv47Upgrade libkea-config84Upgrade libkea-cc69Upgrade libkea-process76Upgrade libkea-d2srv63Upgrade libkea-asiodns49Upgrade libkea-cfgclient67Upgrade kea-develUpgrade libkea-tcp33Upgrade libkea-eval69Upgrade libkea-log61Upgrade libkea-tcp19Upgrade keaUpgrade kea-hooksUpgrade libkea-pgsql88Upgrade libkea-database62Upgrade libkea-log75Upgrade libkea-util87Upgrade libkea-eval84Upgrade libkea-cryptolink64Upgrade libkea-dns++57Upgrade libkea-dns71Upgrade libkea-cc83Upgrade libkea-hooks102Upgrade libkea-dhcpsrv112Upgrade libkea-exceptions33Upgrade libkea-dhcp++92Upgrade libkea-mysql88Upgrade libkea-log-interprocess3Upgrade libkea-cryptolink50Upgrade libkea-asiolink72Upgrade libkea-database76Upgrade libkea-process91Upgrade libkea-pgsql71Upgrade python3-keaUpgrade libkea-dhcp109Upgrade libkea-asiolink88Upgrade libkea-exceptions45Upgrade libkea-mysql71Upgrade libkea-http72Upgrade libkea-asiodns62 | Apr 3, 2026 | Apr 3, 2026 |
| Ubuntu | — | Upgrade kea-adminUpgrade kea-dhcp4-serverUpgrade kea-dhcp6-serverUpgrade kea-dhcp-ddns-serverUpgrade kea-common | Jun 9, 2026 | Jun 8, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub