Red Hat Security AdvisoryRHSA-2025:21006
kea security update
Released 2025-11-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) kea-doc-3.0.1-1.el10_1, kea-hooks-3.0.1-1.el10_1
- Red Hat Enterprise Linux BaseOS (v. 10) kea-3.0.1-1.el10_1, kea-libs-3.0.1-1.el10_1
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kea-keama-3.0.1-1.el10_1
Fixes 1 record
Priority MEDIUM 40
If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the `kea-dhcp4` process will abort with an assertion failure.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00539 · Published 2025-08-27 · Fixed in 2.6.0 CWE-476
