pkg:Alpine/kea
6 total CVEsHIGH1MEDIUM5
✅ Check your installed version
All known vulnerabilities
HIGH7.8CVE-2025-32801Kea configuration and API directives can be used to load a malicious hook library. from 0, < 2.6.3-r0
MEDIUM6.5CVE-2019-6474A missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage contains leases whic… >= 1.4.0, < 1.7.2-r0
MEDIUM6.5CVE-2019-6473An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process (kea-dhcp4), causing the server process to exi… >= 1.4.0, < 1.7.2-r0
MEDIUM6.5A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an assertion failure.
>= 1.4.0, < 1.7.2-r0
MEDIUM6.1Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea.
from 0, < 2.6.3-r0
MEDIUM4.0In some cases, Kea log files or lease files may be world-readable.
from 0, < 2.6.3-r0