What’s Vulnerable › Products

ISC Kea vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your ISC Kea version is affected

Latest ISC Kea vulnerabilities

• CVE-2026-3608 — Stack overflow in Kea daemons (CVSS 7.5)
• CVE-2025-11232 — Invalid characters cause assert (CVSS 7.5)
• CVE-2025-40779 — Kea crash upon interaction between specific client options and subnet selection (CVSS 7.5)
• CVE-2025-32803 — Insecure file permissions can result in confidential information leakage (CVSS 4.0)
• CVE-2025-32802 — Insecure handling of file paths allows multiple local attacks (CVSS 6.1)
• CVE-2025-32801 — Loading a malicious hook library can lead to local privilege escalation (CVSS 7.8)
• CVE-2019-6474 — A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate (CVSS 6.5)
• CVE-2019-6472 — A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate (CVSS 6.5)
• CVE-2018-5739 — Failure to release memory may exhaust system resources (CVSS 7.5)
• CVE-2015-8373 — (CVSS 6.8)