FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

ISC KEA -- Stack overflow in Kea daemons

Affected packages
2.6.0	<=	kea	<	2.6.5
3.0.0	<=	kea	<	3.0.3

Details

VuXML ID	38d8dd83-285c-11f1-9f7b-001b217e4ee5
Discovery	2026-03-18
Entry	2026-03-25

Internet Systems Consortium, Inc. reports:

Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error.

[source]

References

CVE Name	CVE-2026-3608
URL	https://kb.isc.org/docs/cve-2026-3608