CVE-2019-6473

Name of the Vulnerable Software and Affected Versions Kea DHCPv4 server versions 1.4.0 through 1.5.0 Kea DHCPv4 server versions 1.6.0-beta1 Kea DHCPv4 server versions 1.6.0-beta2

Description The issue is caused by an invalid hostname option that triggers an assertion failure in the Kea DHCPv4 server process, resulting in the server process exiting.

Recommendations For versions 1.4.0 through 1.5.0, update to a version outside of the affected range to resolve the issue. For version 1.6.0-beta1, update to a version outside of the affected range to resolve the issue. For version 1.6.0-beta2, update to a version outside of the affected range to resolve the issue.