CVE-2026-3608

High CVSS: 7.5

Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error.
This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.

Vendor

Product

CWE

CWE-617

Yayın Tarihi

2026-03-25 09:16:25

Güncelleme

2026-03-25 18:16:32

Source Identifier

security-officer@isc.org

KEV Date Added

Kategoriler

CWE-617 HIGH 2026

Referanslar

https://downloads.isc.org/isc/kea/2.6.5 https://downloads.isc.org/isc/kea/3.0.3 https://kb.isc.org/docs/cve-2026-3608 http://www.openwall.com/lists/oss-security/2026/03/25/6