https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:44:57.603438+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:7342 ALSA-2026:7342 — Important: kea security update 2026-10-06T15:44:57.628284+00:00

Affected: AlmaLinux:10: kea-doc

DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers support DNS Update mechanism, using stand-alone DDNS daemon.

Security Fix(es):

* Kea: Kea: Denial of Service via maliciously crafted message (CVE-2026-3608)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0356 certfr-2026-avi-0356 — Une vulnérabilité a été découverte dans ISC Kea. Elle permet à un attaquant de provoquer un déni de service à distance. 2026-10-06T15:44:57.628354+00:00 certfr-2026-avi-0356 https://cve.radiocsirt.org/vuln/euvd-2026-337290 EUVD-2026-337290 2026-10-06T15:44:57.628374+00:00 EUVD-2026-337290 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3608 fkie_cve-2026-3608 2026-10-06T15:44:57.628386+00:00

Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.

 https://cve.radiocsirt.org/vuln/ghsa-8xcr-6f99-hm7w GHSA-8xcr-6f99-hm7w 2026-10-06T15:44:57.628408+00:00

Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10421-1 openSUSE-SU-2026:10421-1 — kea-3.0.3-1.1 on GA media 2026-10-06T15:44:57.628423+00:00

kea-3.0.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:11344 RHSA-2026:11344 — Red Hat Security Advisory: kea security update 2026-10-06T15:44:57.628440+00:00

Kea: Kea: Denial of Service via maliciously crafted message

 https://cve.radiocsirt.org/vuln/suse-su-2026:1548-1 SUSE-SU-2026:1548-1 — Security update for kea 2026-10-06T15:44:57.628457+00:00

Security update for kea

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-3608 UBUNTU-CVE-2026-3608 2026-10-06T15:44:57.628471+00:00

Affected: Ubuntu:Pro:16.04:LTS: isc-kea, Ubuntu:Pro:18.04:LTS: isc-kea, Ubuntu:20.04:LTS: isc-kea, Ubuntu:22.04:LTS: isc-kea, Ubuntu:24.04:LTS: isc-kea, Ubuntu:25.10: isc-kea

Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0887 WID-SEC-W-2026-0887 — Internet Systems Consortium Kea: Schwachstelle ermöglicht Denial of Service 2026-10-06T15:44:57.628497+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Internet Systems Consortium Kea ausnutzen, um einen Denial of Service Angriff durchzuführen.