PT-2015-7778 · Isc · Isc Kea

Published 2015-12-22 · Updated 2016-12-07 · CVE-2015-8373

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ISC Kea versions 0.9.2 through 1.0.0-beta

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a malformed packet when certain debugging settings are used.

Recommendations For versions 0.9.2 through 1.0.0-beta, consider disabling the debugging settings to prevent the daemon crash until a fix is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-8373

Affected Products

Isc Kea

References · 4

• http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175218.html · Vendor Advisory
• https://kb.isc.org/article/AA-01318 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8373 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175337.html · Vendor Advisory