Логотип exploitDog
bind:CVE-2025-32802
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-32802

Количество 9

Количество 9

ubuntu логотип

CVE-2025-32802

5 месяцев назад

Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

CVSS3: 6.1
EPSS: Низкий
redhat логотип

CVE-2025-32802

5 месяцев назад

Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2025-32802

5 месяцев назад

Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2025-32802

5 месяцев назад

Kea configuration and API directives can be used to overwrite arbitrar ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-vwc9-wh34-hrfm

5 месяцев назад

Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

CVSS3: 6.1
EPSS: Низкий
fstec логотип

BDU:2025-11746

5 месяцев назад

Уязвимость DHCP-сервера с открытым исходным кодом Kea, связанная с некорректным внешним управлением именем или путем файла, позволяющая нарушителю получить доступ на запись произвольных файлов

CVSS3: 6.1
EPSS: Низкий
redos логотип

ROS-20250924-05

около 1 месяца назад

Множественные уязвимости kea

CVSS3: 6.1
EPSS: Низкий
rocky логотип

RLSA-2025:9178

около 1 месяца назад

Important: kea security update

EPSS: Низкий
oracle-oval логотип

ELSA-2025-9178

4 месяца назад

ELSA-2025-9178: kea security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-32802

Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

CVSS3: 6.1
0%
Низкий
5 месяцев назад
redhat логотип
CVE-2025-32802

Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

CVSS3: 6.1
0%
Низкий
5 месяцев назад
nvd логотип
CVE-2025-32802

Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

CVSS3: 6.1
0%
Низкий
5 месяцев назад
debian логотип
CVE-2025-32802

Kea configuration and API directives can be used to overwrite arbitrar ...

CVSS3: 6.1
0%
Низкий
5 месяцев назад
github логотип
GHSA-vwc9-wh34-hrfm

Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

CVSS3: 6.1
0%
Низкий
5 месяцев назад
fstec логотип
BDU:2025-11746

Уязвимость DHCP-сервера с открытым исходным кодом Kea, связанная с некорректным внешним управлением именем или путем файла, позволяющая нарушителю получить доступ на запись произвольных файлов

CVSS3: 6.1
0%
Низкий
5 месяцев назад
redos логотип
ROS-20250924-05

Множественные уязвимости kea

CVSS3: 6.1
около 1 месяца назад
rocky логотип
RLSA-2025:9178

Important: kea security update

около 1 месяца назад
oracle-oval логотип
ELSA-2025-9178

ELSA-2025-9178: kea security update (IMPORTANT)

4 месяца назад

Уязвимостей на страницу