VULNERABILITY INTELLIGENCE
CVE-2015-8373
CVSS score6.8 MEDIUM
EPSS probability3.74%
CISA KEVNot currently listed
Published2015-12-22
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Description
The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow remote attackers to cause a denial of service (daemon crash) via a malformed packet.
Weakness classification
- CWE-20: Improper Input Validation