CVE-2026-3608
Received Received - Intake
Stack Overflow in Kea DHCP Daemons Causes Service Crash

Publication date: 2026-03-25

Last updated on: 2026-03-25

Assigner: Internet Systems Consortium (ISC)

Description
Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-25
Last Modified
2026-03-25
Generated
2026-06-16
AI Q&A
2026-03-25
EPSS Evaluated
2026-06-15
NVD
CVE-2026-3608
EUVD
EUVD-2026-15196
Affected Vendors & Products
Showing 4 associated CPEs
Vendor Product Version / Range
isc kea From 2.6.0 (inc) to 2.6.4 (inc)
isc kea From 3.0.0 (inc) to 3.0.2 (inc)
isc kea 2.6.5
isc kea 3.0.3
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-617 The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability occurs when a maliciously crafted message is sent to certain Kea daemons, specifically kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6, over any configured API socket or HA listener.

The crafted message causes the receiving daemon to experience a stack overflow error, which results in the daemon exiting unexpectedly.

It affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.

Impact Analysis

The impact of this vulnerability is that an attacker can cause the affected Kea daemons to crash by sending a specially crafted message.

This results in a denial of service condition, as the daemon exits due to a stack overflow error.

Since the availability of the DHCP services provided by these daemons is disrupted, network operations relying on these services may be interrupted.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-3608. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart