Skip to content
Sign in
4.0 Medium

CVE-2025-32803 In some cases, Kea log files or lease files may be world-readable

Description

In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

Affected products and versions

Product Affected versions Fixed in
Kea 2.7 2.7.0 → 2.7.8 No fix stated
Kea 2.6 2.6.0 → 2.6.2 No fix stated
Kea 2.4 2.4.0 → 2.4.1 No fix stated

Other CVEs of Kea

The 9 CVEs of Kea →
CVE-2026-3608 Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any… 7.5 High CVE-2025-11232 To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at… 7.5 High CVE-2025-40779 If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the… 7.5 High CVE-2025-32802 Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea 6.1 Medium
Track this CVE