PT-2019-18106 · Isc+1 · Kea Dhcpv4 Server+1

Publicado 2019-08-28 · Atualizado 2025-09-21 · CVE-2019-6473

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Kea DHCPv4 server versions 1.4.0 through 1.5.0 Kea DHCPv4 server versions 1.6.0-beta1 Kea DHCPv4 server versions 1.6.0-beta2

Description The issue is caused by an invalid hostname option that triggers an assertion failure in the Kea DHCPv4 server process, resulting in the server process exiting.

Recommendations For versions 1.4.0 through 1.5.0, update to a version outside of the affected range to resolve the issue. For version 1.6.0-beta1, update to a version outside of the affected range to resolve the issue. For version 1.6.0-beta2, update to a version outside of the affected range to resolve the issue.

Correção

Assertion Failure

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

CVE-2019-6473

USN-7759-1

Produtos afetados

Kea Dhcpv4 Server

Ubuntu

Referências · 12

• https://ubuntu.com/security/notices/USN-7759-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-6473 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALPINE-CVE-2019-6473 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6473 · Nota de Segurança
• https://ubuntu.com/security/CVE-2019-6473 · Aviso do Fabricante
• https://security.alpinelinux.org/vuln/CVE-2019-6473 · Nota
• https://osv.dev/vulnerability/USN-7759-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-6473 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-6473 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6473 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-6473 · Aviso do Fabricante
• https://kb.isc.org/docs/cve-2019-6473 · Aviso do Fabricante