Approved changes feed: RSS · Atom

cpe:2.3:a:isc:kea:1.6.0:beta1:*:*:*:*:*:*

part: a version: 1.6.0 update: beta1

VendorIsc (4a2f2b37-98b6-5702-822d-72afcd17d050)
ProductKea (53ce22d6-5f91-5354-9ad5-9b5f45680bbf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/isc-kea purl2cpe 2026-06-01 10:15:10.630472
pkg:deb/ubuntu/isc-kea purl2cpe 2026-06-01 10:15:10.630474
pkg:github/isc-projects/kea purl2cpe 2026-06-01 10:15:10.630476
pkg:rpm/fedora/kea purl2cpe 2026-06-01 10:15:10.630478
pkg:rpm/opensuse/kea purl2cpe 2026-06-01 10:15:10.630480

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6474 vulnerable 2026-06-03 14:40:39.379084 A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate
MEDIUM (5.7)
A missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage contains leases which are rejected as invalid when the server tries to load leases from storage on restart. If the number of such leases exceeds a hard-coded limit in the Kea code, a server trying to restart will conclude that there is a problem with its lease store and give up. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2
Published: 2019-10-16T17:22:16.767Z
Updated: 2024-09-16T22:19:36.160Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6472 vulnerable 2026-06-03 14:40:39.375534 A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate
MEDIUM (6.5)
A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an assertion failure. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2.
Published: 2019-10-16T17:22:16.689Z
Updated: 2024-09-17T03:58:54.278Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.