REDHAT-BUG-2407178: High severity ISC kea vulnerability
To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "[^A-Za-z0-9.-]"; "hostname-char-replacement" must be empty (the default); and "ddns-qualifying-suffix" must NOT be empty (the default is empty). DDNS updates do not need to be enabled for this issue to manifest. A client that sends certain option content would then cause kea-dhcp4 to exit unexpectedly. This issue affects Kea versions 3.0.1 through 3.0.1 and 3.1.1 through 3.1.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2407178?
The severity of REDHAT-BUG-2407178 is classified as moderate due to specific configuration requirements that affect the DNS functionality.
How do I fix REDHAT-BUG-2407178?
To fix REDHAT-BUG-2407178, ensure that the configuration parameters 'hostname-char-replacement' is filled appropriately and 'ddns-qualifying-suffix' is not empty.
What software is affected by REDHAT-BUG-2407178?
REDHAT-BUG-2407178 affects ISC Kea versions 3.0.1 and 3.1.1 to 3.1.2.
What are the required configuration parameters to trigger REDHAT-BUG-2407178?
The required configuration parameters to trigger REDHAT-BUG-2407178 are 'hostname-char-set' set to the default, 'hostname-char-replacement' left empty, and 'ddns-qualifying-suffix' not being empty.
Is there a workaround for REDHAT-BUG-2407178?
As of now, there is no officially documented workaround for REDHAT-BUG-2407178 without changing the configuration parameters.