ISC Vulnerabilities and Affected Products

Products

BIND 969 vulnerabilities
BIND923 vulnerabilities
bind14 vulnerabilities
Kea9 vulnerabilities
ISC DHCP6 vulnerabilities
BIND 9 Supported Preview Edition2 vulnerabilities
Stork2 vulnerabilities
bind_91 vulnerability
inn1 vulnerability
Kea DHCP1 vulnerability

ISC vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2026-3608HIGH	Stack overflow in Kea daemons Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2. CWE-617Mar 25, 2026	CVSS7.5v3.1	EPSS1.36%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-11232HIGH	Invalid characters cause assert To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "[^A-Za-z0-9.-]"; "hostname-char-replacement" must be empty (the default); and "ddns-qualifying-suffix" must NOT be empty (the default is empty). DDNS updates do not need to be enabled for this issue to manifest. A client that sends certain option content would then cause kea-dhcp4 to exit unexpectedly. This issue affects Kea versions 3.0.1 through… CWE-823Oct 29, 2025	CVSS7.5v3.1	EPSS0.396%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-40779HIGH	Kea crash upon interaction between specific client options and subnet selection If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the `kea-dhcp4` process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem. This issue affects Kea versions 2.7.1 through 2.7.9, 3.0.0, and 3.1.0. CWE-476Aug 27, 2025	CVSS7.5v3.1	EPSS0.514%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-32803MEDIUM	Insecure file permissions can result in confidential information leakage In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8. CWE-276May 28, 2025	CVSS4.0v3.1	EPSS0.212%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-32802MEDIUM	Insecure handling of file paths allows multiple local attacks Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8. CWE-379 CWE-73May 28, 2025	CVSS6.1v3.1	EPSS0.195%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-32801HIGH	Loading a malicious hook library can lead to local privilege escalation Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8. CWE-94May 28, 2025	CVSS7.8v3.1	EPSS0.24%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2019-6474MEDIUM	A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate A missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage contains leases which are rejected as invalid when the server tries to load leases from storage on restart. If the number of such leases exceeds a hard-coded limit in the Kea code, a server trying to restart will conclude that there is a problem with its lease store and give up. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2 CWE-772Oct 16, 2019	CVSS5.7v3.1	EPSS0.717%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2019-6473MEDIUM	A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process (kea-dhcp4), causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2. CWE-617Oct 16, 2019	CVSS6.5v3.1	EPSS0.803%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2019-6472MEDIUM	A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an assertion failure. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2. CWE-617Oct 16, 2019	CVSS6.5v3.1	EPSS0.802%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX