vulnerability
FreeBSD: VID-f727fe60-8389-11f0-8438-001b217e4ee5 (CVE-2025-40779): ISC KEA -- kea-dhcp4 aborts if client sends a broadcast request with particular options
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | Aug 27, 2025 | Dec 10, 2025 | Dec 10, 2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Aug 27, 2025
Added
Dec 10, 2025
Modified
Dec 10, 2025
Description
Internet Systems Consortium, Inc. reports: We corrected an issue in `kea-dhcp4` that caused the server to abort if a client sent a broadcast request with particular options, and Kea failed to find an appropriate subnet for that client. This addresses CVE-2025-40779 [#4055, #4048].
Solutions
freebsd-upgrade-package-keafreebsd-upgrade-package-kea-devel
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.