Ubuntu alert USN-8403-1 (isc-kea)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8403-1] Kea DHCP vulnerability
Date:
             
 
Mon, 08 Jun 2026 16:58:42 +0000
Message-ID:
             
 
<E1wWdJC-0002Wn-Ap@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8403-1
June 08, 2026

isc-kea vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS

Summary:

Kea DHCP could be made to crash if it received specially crafted messages.

Software Description:
- isc-kea: Standards-based DHCP server

Details:

Ali Norouzi discovered that Kea DHCP did not properly handle maliciously
crafted messages over configured API sockets and HA listeners. A remote
attacker could possibly use this issue to cause Kea DHCP to crash,
resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  kea-admin                       2.6.3-2ubuntu0.1
  kea-common                      2.6.3-2ubuntu0.1
  kea-dhcp-ddns-server            2.6.3-2ubuntu0.1
  kea-dhcp4-server                2.6.3-2ubuntu0.1
  kea-dhcp6-server                2.6.3-2ubuntu0.1

Ubuntu 24.04 LTS
  kea-admin                       2.4.1-3ubuntu0.2
  kea-common                      2.4.1-3ubuntu0.2
  kea-dhcp-ddns-server            2.4.1-3ubuntu0.2
  kea-dhcp4-server                2.4.1-3ubuntu0.2
  kea-dhcp6-server                2.4.1-3ubuntu0.2

After a standard system update you may need to restart Kea DHCP server
instances to make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8403-1
  CVE-2026-3608

Package Information:
  https://launchpad.net/ubuntu/+source/isc-kea/2.6.3-2ubunt...
  https://launchpad.net/ubuntu/+source/isc-kea/2.4.1-3ubunt...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=DKPP
-----END PGP SIGNATURE-----