CVE-2025-11232 is a denial-of-service vulnerability affecting Kea DHCPv4 servers, specifically versions 3.0.1 and 3.1.1 through 3.1.2. It can be triggered when a client sends specific option content, causing the kea-dhcp4 service to exit unexpectedly, provided three non-default configuration parameters are met. This vulnerability has a CVSS score of 7.5 (HIGH), indicating it can be exploited remotely with low attack complexity, leading to high availability impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 3.0.1, <= 3.0.1CPE match | cpe:2.3:a:isc:kea:*:*:*:*:*:*:*:* | ||
>= 3.1.1, <= 3.1.2CPE match | cpe:2.3:a:isc:kea:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.