Stack overflow in Kea daemons

Invalid characters cause assert

Kea crash upon interaction between specific client options and subnet selection

Insecure file permissions can result in confidential information leakage

Insecure handling of file paths allows multiple local attacks

Loading a malicious hook library can lead to local privilege escalation

DHCP memory leak

An option refcount overflow exists in dhcpd

A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient

A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate

A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate

A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate

A specially constructed response from a malicious server can cause a buffer overflow in dhclient

Failure to release memory may exhaust system resources

A malicious client can overflow a reference counter in ISC dhcpd

Failure to properly clean up closed OMAPI connections can exhaust available sockets