Debian/isc-kea: high 7.8
Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control
Action: Upgrade isc-kea to 2.6.3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.3-1 | - |
Fixed versions
| 2.6.3-1 |
Sources
- osv: DEBIAN-CVE-2025-32801#Debian:14/isc-kea
- https://security-tracker.debian.org/tracker/CVE-2025-32801
published · modified · JSON