Known vulnerabilities in Kea

Vendor: ISC
Software: Kea
Software CPE: cpe:2.3:a:isc:kea:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kea Kea is affected by 9 known vulnerabilities: 6 medium, 3 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114676 - Reachable Assertion
CVE-2025-40779
CWE-617 Medium
No
No
3.0.1, 3.1.1 02.09.2025 SB2025090242
SB2025090243
SB2025090244
and 1 more
#VU112083 - Incorrect Default Permissions
CVE-2025-32803
CWE-276 Low
No
No
2.4.2, 2.6.3, 2.7.9 01.07.2025 SB2025070153
SB2025070159
SB2025070160
and 4 more
#VU112082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-32802
CWE-22 Low
No
No
2.4.2, 2.6.3, 2.7.9 01.07.2025 SB2025070153
SB2025070159
SB2025070160
and 4 more
#VU112080 - Untrusted Search Path
CVE-2025-32801
CWE-426 Low
No
No
2.4.2, 2.6.3, 2.7.9 01.07.2025 SB2025070153
SB2025070159
SB2025070160
and 4 more
#VU33366 - Reachable Assertion
CVE-2019-6472
CWE-617 Medium
No
No
- 16.10.2019 SB2019101617
SB2019120719
SB2019083048
and 1 more
#VU33367 - Reachable Assertion
CVE-2019-6473
CWE-617 Medium
No
No
- 16.10.2019 SB2019101618
SB2019120720
SB2019083048
and 2 more
#VU33368 - Improper input validation
CVE-2019-6474
CWE-20 Medium
No
No
- 16.10.2019 SB2019101619
SB2019120721
SB2019083048
and 1 more
#VU36192 - Improper input validation
CVE-2018-5739
CWE-20 Medium
No
No
- 16.01.2019 SB2019011622
#VU40568 - Improper input validation
CVE-2015-8373
CWE-20 Medium
No
No
- 23.12.2015 SB2015122301
SB2015122304
SB2015122305