PT-2019-18106 · Isc+1 · Kea Dhcpv4 Server+1

Published 2019-08-28 · Updated 2025-09-21 · CVE-2019-6473

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Kea DHCPv4 server versions 1.4.0 through 1.5.0 Kea DHCPv4 server versions 1.6.0-beta1 Kea DHCPv4 server versions 1.6.0-beta2

Description The issue is caused by an invalid hostname option that triggers an assertion failure in the Kea DHCPv4 server process, resulting in the server process exiting.

Recommendations For versions 1.4.0 through 1.5.0, update to a version outside of the affected range to resolve the issue. For version 1.6.0-beta1, update to a version outside of the affected range to resolve the issue. For version 1.6.0-beta2, update to a version outside of the affected range to resolve the issue.

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2019-6473

USN-7759-1

Affected Products

Kea Dhcpv4 Server

Ubuntu

References · 12

• https://ubuntu.com/security/notices/USN-7759-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-6473 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2019-6473 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6473 · Security Note
• https://ubuntu.com/security/CVE-2019-6473 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7759-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-6473 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-6473 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-6473 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-6473 · Vendor Advisory
• https://kb.isc.org/docs/cve-2019-6473 · Vendor Advisory
• https://security.alpinelinux.org/vuln/CVE-2019-6473 · Note