Threats affecting pkg:rpm/redhat/kea

A reachable assertion vulnerability (CWE-617) in ISC Kea DHCP daemons (kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, kea-dhcp6) allows a denial of service via a stack overflow triggered by a maliciously crafted message sent over any configured API socket or HA listener. This affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2. Red Hat has issued security advisories and updates to address this issue.

Two security vulnerabilities were fixed in the kea DHCP server software in version 3.0.3. CVE-2025-11232 addresses an assertion failure caused by invalid characters leading to hostname sanitizing issues. CVE-2026-3608 fixes a stack overflow triggered by a large number of bracket pairs in JSON payloads due to recursive parsing. These issues could cause service disruption or denial of service. The update also includes other stability and security improvements.

Red Hat has issued a security advisory for the kea DHCP implementation addressing three vulnerabilities: a local privilege escalation via loading a malicious hook library (CVE-2025-32801), insecure file path handling allowing local attacks (CVE-2025-32802), and insecure file permissions leading to confidential information leakage (CVE-2025-32803). These issues affect Red Hat Enterprise Linux 10 and related variants. A security update is available to remediate these vulnerabilities.