VDB
CVE-2019-6474
CVE-2019-6474
PUBLISHED
A missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage contains leases which are rejected as invalid when the server tries to load leases from storage on restart. If the number of such leases exceeds a hard-coded limit in the Kea code, a server trying to restart will conclude that there is a problem with its lease store and give up. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2
EPSS 0.72% · 50.4th percentile
Risk Scores
EPSS Score
0.72%
50.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:Pro:18.04:LTS | isc-kea | 1.1.0-1build1, 0, 1.1.0-1 |
| Ubuntu:Pro:16.04:LTS | isc-kea | 0, 1.0.0-1, 1.0.0-1build1 |
Timeline
- Aug 28, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2019-6474 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2019-6474 third-party-advisory