6.5
Medium
CVE-2019-6473 An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process (kea-dhcp4), causing the…
Description
An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process (kea-dhcp4), causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kea 1.6 | 1.6.0-beta1 → 1.6.0-beta2 | No fix stated |
Other CVEs of Kea
The 9 CVEs of Kea →
CVE-2026-3608
Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any…
7.5
High
CVE-2025-11232
To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at…
7.5
High
CVE-2025-40779
If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the…
7.5
High
CVE-2025-32803
In some cases, Kea log files or lease files may be world-readable
4.0
Medium