CVE-2018-5739

An extension to hooks capabilities which debuted in Kea 1.4.0 introduced a memory leak for operators who are using certain hooks library facilities. In order to support multiple requests simultaneously, Kea 1.4 added a callout handle store but unfortunately the initial implementation of this stor...

CVE-2018-5739

CVE-2018-5739 is a memory-leak issue in Kea DHCP 1.4.0 related to the callout handle store. The initial implementation of the store does not always free memory, allowing memory usage to grow when hooks using query4 or query6 parameters are invoked, potentially exhausting server memory and causing...