Threats tagged 'ghsa-wcxf-jmjh-x27q'

A vulnerability in Kea DHCP versions 3.0.1 and 3.1.1 through 3.1.2 can cause the kea-dhcp4 service to exit unexpectedly when specific configuration parameters are set to particular values. The issue requires "hostname-char-set" to be at its default value "[^A-Za-z0-9.-]", "hostname-char-replacement" to be empty, and "ddns-qualifying-suffix" to be non-empty. This can be triggered by a client sending certain option content, leading to a denial of service condition.