diff options
| author | Andrey Pevnev <apevnev@me.com> | 2025-08-28 16:19:06 -0300 |
|---|---|---|
| committer | Renato Botelho <garga@FreeBSD.org> | 2025-08-28 16:32:40 -0300 |
| commit | f094f8425566fffceee0f25f0161ce83301023e9 (patch) | |
| tree | 69c55c0fa206c428ea6c21da379db61cc1943359 | |
| parent | net/kea: Update to 3.0.1 (diff) | |
security/vuxml: Add net/kea vulnerability
* CVE-2025-40779
| -rw-r--r-- | security/vuxml/vuln/2025.xml | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index 2009194bf407..6946108a86d8 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,31 @@ + <vuln vid="f727fe60-8389-11f0-8438-001b217e4ee5"> + <topic>ISC KEA -- kea-dhcp4 aborts if client sends a broadcast request with particular options</topic> + <affects> + <package> + <name>kea</name> + <range><lt>3.0.1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Internet Systems Consortium, Inc. reports:</p> + <blockquote cite="https://kb.isc.org/docs/"> + <p>We corrected an issue in `kea-dhcp4` that caused + the server to abort if a client sent a broadcast request with particular + options, and Kea failed to find an appropriate subnet for that client. + This addresses CVE-2025-40779 [#4055, #4048].</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2025-40779</cvename> + </references> + <dates> + <discovery>2025-08-27</discovery> + <entry>2025-08-27</entry> + </dates> + </vuln> + <vuln vid="2a11aa1e-83c7-11f0-b6e5-4ccc6adda413"> <topic>qt6-base -- DoS in QColorTransferGenericFunction</topic> <affects> |