CVE catalog

CVE-2026-3608

Kea DHCP vulnerability

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.39% · Oct 25, 2026

Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianisc-keasid3.0.4-2fixed
Debianisc-keaforky3.0.4-2fixed
Debianisc-keatrixie2.6.3-1+deb13u1fixed
Debianisc-keabookworm2.2.0-6vulnerable
Ubuntuisc-keanoble2.4.1-3ubuntu0.2fixed
Ubuntukeanoble2.4.1-3ubuntu0.2fixed
Ubuntukea-adminnoble2.4.1-3ubuntu0.2fixed
Ubuntukea-commonnoble2.4.1-3ubuntu0.2fixed
Ubuntukea-ctrl-agentnoble2.4.1-3ubuntu0.2fixed
Ubuntukea-devnoble2.4.1-3ubuntu0.2fixed
Ubuntukea-dhcp-ddns-servernoble2.4.1-3ubuntu0.2fixed
Ubuntukea-dhcp4-servernoble2.4.1-3ubuntu0.2fixed
Ubuntukea-dhcp6-servernoble2.4.1-3ubuntu0.2fixed
Ubuntukea-docnoble2.4.1-3ubuntu0.2fixed
Ubuntupython3-kea-connectornoble2.4.1-3ubuntu0.2fixed
Ubuntuisc-keanobleNot reportedvulnerable
Alpinekea3.222.6.5-r0fixed
Alpinekea3.233.0.3-r0fixed
Alpinekea3.243.0.3-r0fixed
Ubuntuisc-keapro1.1.0-1vulnerable
Ubuntuisc-keapro1.1.0-1build1vulnerable
Ubuntuisc-keapro1.1.0-1build2vulnerable
Ubuntuisc-keapro1.1.0-1ubuntu0.1~esm1vulnerable
Ubuntuisc-kea20.041.5.0-2ubuntu1vulnerable
Ubuntuisc-kea20.041.5.0-2ubuntu2vulnerable
Ubuntuisc-kea20.041.5.0-2ubuntu3vulnerable
Ubuntuisc-kea20.041.6.1-0ubuntu1vulnerable
Ubuntuisc-kea20.041.6.1-0ubuntu2vulnerable
Ubuntuisc-kea20.041.6.2-0ubuntu1vulnerable
Ubuntuisc-kea22.041.8.0-0ubuntu1vulnerable
Ubuntuisc-kea22.042.0.1-2vulnerable
Ubuntuisc-kea22.042.0.2-1vulnerable
Ubuntuisc-kea22.042.0.2-1ubuntu0.1vulnerable
Ubuntuisc-kea24.042.2.1-3vulnerable
Ubuntuisc-kea24.042.4.0-1vulnerable
Ubuntuisc-kea24.042.4.1-1vulnerable
Ubuntuisc-kea24.042.4.1-2build1vulnerable
Ubuntuisc-kea24.042.4.1-3build1vulnerable
Ubuntuisc-kea24.042.4.1-3build3vulnerable
Ubuntuisc-kea24.042.4.1-3build3.1vulnerable
Ubuntuisc-kea24.042.4.1-3ubuntu0.1vulnerable
Ubuntuisc-kea24.042.4.1-3ubuntu0.2fixed
Ubuntuisc-kea25.102.6.1-1vulnerable
Ubuntuisc-kea25.102.6.1-2vulnerable
Ubuntuisc-kea25.102.6.3-1vulnerable
Ubuntuisc-kea25.102.6.3-2vulnerable
Ubuntuisc-kea25.102.6.3-2ubuntu0.1fixed
Ubuntuisc-kea24.042.2.1-3vulnerable
Ubuntuisc-kea24.042.4.0-1vulnerable
Ubuntuisc-kea24.042.4.1-1vulnerable
Ubuntuisc-kea24.042.4.1-2build1vulnerable
Ubuntuisc-kea24.042.4.1-3build1vulnerable
Ubuntuisc-kea24.042.4.1-3build3vulnerable
Ubuntuisc-kea24.042.4.1-3build3.1vulnerable
Ubuntuisc-kea24.042.4.1-3ubuntu0.1vulnerable
Ubuntuisc-kea24.042.4.1-3ubuntu0.2fixed
Ubuntuisc-kea25.102.6.1-1vulnerable
Ubuntuisc-kea25.102.6.1-2vulnerable
Ubuntuisc-kea25.102.6.3-1vulnerable
Ubuntuisc-kea25.102.6.3-2vulnerable
Ubuntuisc-kea25.102.6.3-2ubuntu0.1fixed
Susekealinux enterprise server 15 sp6-ltss2.6.5-150600.13.9.1fixed
Susekealinux enterprise server for sap applications 15 sp62.6.5-150600.13.9.1fixed
Susekealinux enterprise module for basesystem 15 sp72.6.5-150700.3.6.1fixed
Susekealinux enterprise module for server applications 15 sp72.6.5-150700.3.6.1fixed
Opensusekeatumbleweed3.0.3-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianisc-keasourcesid3.0.3-1not yet assignedNot reportedNot reported
Debianisc-keasourceforky3.0.3-1not yet assignedNot reportedNot reported
Debianisc-keasourcetrixie2.6.3-1+deb13u1not yet assignedNot reportedNot reported
Debianisc-keasourcebookworm(unfixed)not yet assignedNot reportedNot reported
Ubuntuisc-keadebnoble2.4.1-3ubuntu0.2Not reportedNot reportedNot reported
Ubuntukeadebnoble2.4.1-3ubuntu0.2Not reportedNot reportedNot reported
Ubuntukea-admindebnoble2.4.1-3ubuntu0.2Not reportedNot reportedNot reported
Ubuntukea-commondebnoble2.4.1-3ubuntu0.2Not reportedNot reportedNot reported
Ubuntukea-ctrl-agentdebnoble2.4.1-3ubuntu0.2Not reportedNot reportedNot reported
Ubuntukea-devdebnoble2.4.1-3ubuntu0.2Not reportedNot reportedNot reported
Ubuntukea-dhcp-ddns-serverdebnoble2.4.1-3ubuntu0.2Not reportedNot reportedNot reported
Ubuntukea-dhcp4-serverdebnoble2.4.1-3ubuntu0.2Not reportedNot reportedNot reported
Ubuntukea-dhcp6-serverdebnoble2.4.1-3ubuntu0.2Not reportedNot reportedNot reported
Ubuntukea-docdebnoble2.4.1-3ubuntu0.2Not reportedNot reportedNot reported
Ubuntupython3-kea-connectordebnoble2.4.1-3ubuntu0.2Not reportedNot reportedNot reported
Alpinekeaapk3.222.6.5-r0Not reportedALPINE-CVE-2026-3608Not reported
Alpinekeaapk3.233.0.3-r0Not reportedALPINE-CVE-2026-3608Not reported
Alpinekeaapk3.243.0.3-r0Not reportedALPINE-CVE-2026-3608Not reported
Ubuntuisc-keadeb24.042.4.1-3ubuntu0.2Not reportedUBUNTU-CVE-2026-3608Not reported
Ubuntuisc-keadeb25.102.6.3-2ubuntu0.1Not reportedUBUNTU-CVE-2026-3608Not reported
Ubuntuisc-keadeb24.042.4.1-3ubuntu0.2Not reportedUSN-8403-1Not reported
Ubuntuisc-keadeb25.102.6.3-2ubuntu0.1Not reportedUSN-8403-1Not reported
Susekearpmlinux enterprise server 15 sp6-ltss2.6.5-150600.13.9.1Not reportedSUSE-SU-2026:1548-1Not reported
Susekearpmlinux enterprise server for sap applications 15 sp62.6.5-150600.13.9.1Not reportedSUSE-SU-2026:1548-1Not reported
Susekearpmlinux enterprise module for basesystem 15 sp72.6.5-150700.3.6.1Not reportedSUSE-SU-2026:1378-1Not reported
Susekearpmlinux enterprise module for server applications 15 sp72.6.5-150700.3.6.1Not reportedSUSE-SU-2026:1378-1Not reported
Opensusekearpmtumbleweed3.0.3-1.1Not reportedOPENSUSE-SU-2026:10421-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [kea]Affected

    Source package: [isc-kea]

    Details (2)

    • 2.2.0-6 · all · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

    • 2.2.0-6 · all · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

  • [kea-admin]Affected

    Source package: [isc-kea]

    Details (2)

    • 2.2.0-6 · amd64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

    • 2.2.0-6 · arm64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

  • [kea-common]Affected

    Source package: [isc-kea]

    Details (2)

    • 2.2.0-6 · amd64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

    • 2.2.0-6 · arm64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

  • [kea-ctrl-agent]Affected

    Source package: [isc-kea]

    Details (2)

    • 2.2.0-6 · amd64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

    • 2.2.0-6 · arm64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

  • [kea-dev]Affected

    Source package: [isc-kea]

    Details (2)

    • 2.2.0-6 · amd64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

    • 2.2.0-6 · arm64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

  • [kea-dhcp4-server]Affected

    Source package: [isc-kea]

    Details (2)

    • 2.2.0-6 · amd64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

    • 2.2.0-6 · arm64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

  • [kea-dhcp6-server]Affected

    Source package: [isc-kea]

    Details (2)

    • 2.2.0-6 · amd64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

    • 2.2.0-6 · arm64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

  • [kea-dhcp-ddns-server]Affected

    Source package: [isc-kea]

    Details (2)

    • 2.2.0-6 · amd64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

    • 2.2.0-6 · arm64 · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

  • [kea-doc]Affected

    Source package: [isc-kea]

    Details (2)

    • 2.2.0-6 · all · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

    • 2.2.0-6 · all · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

  • [python3-kea-connector]Affected

    Source package: [isc-kea]

    Details (2)

    • 2.2.0-6 · all · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

    • 2.2.0-6 · all · bookworm

      Affected

      usn · isc-kea · debian · bookworm; usn · isc-kea · debian · 12

[openSUSE Tumbleweed]

  • [kea-devel]Unknown

    Source package: [kea]

    Details (1)

    • 3.2.0-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.0.3-1.1

      Version impact unknown

      usn · kea · opensuse · tumbleweed

  • [kea-doc]Unknown

    Source package: [kea]

    Details (1)

    • 3.2.0-1.2 · noarch · tumbleweed

      Unknown · Fixed: 3.0.3-1.1

      Version impact unknown

      usn · kea · opensuse · tumbleweed

  • [kea-hooks]Unknown

    Source package: [kea]

    Details (1)

    • 3.2.0-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.0.3-1.1

      Version impact unknown

      usn · kea · opensuse · tumbleweed

  • [libkea-asiodns75]Unknown

    Source package: [kea]

    Details (1)

    • 3.2.0-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.0.3-1.1

      Version impact unknown

      usn · kea · opensuse · tumbleweed

  • [libkea-asiolink105]Unknown

    Source package: [kea]

    Details (1)

    • 3.2.0-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.0.3-1.1

      Version impact unknown

      usn · kea · opensuse · tumbleweed

  • [libkea-cc98]Unknown

    Source package: [kea]

    Details (1)

    • 3.2.0-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.0.3-1.1

      Version impact unknown

      usn · kea · opensuse · tumbleweed

  • [libkea-cfgrpt3]Unknown

    Source package: [kea]

    Details (1)

    • 3.2.0-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.0.3-1.1

      Version impact unknown

      usn · kea · opensuse · tumbleweed

  • [libkea-config98]Unknown

    Source package: [kea]

    Details (1)

    • 3.2.0-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.0.3-1.1

      Version impact unknown

      usn · kea · opensuse · tumbleweed

  • [libkea-cryptolink76]Unknown

    Source package: [kea]

    Details (1)

    • 3.2.0-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.0.3-1.1

      Version impact unknown

      usn · kea · opensuse · tumbleweed

  • [libkea-d2srv75]Unknown

    Source package: [kea]

    Details (1)

    • 3.2.0-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 3.0.3-1.1

      Version impact unknown

      usn · kea · opensuse · tumbleweed

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]