CVE-2025-3747

CVE-2025-32801 concerns Kea (ISC DHCP server). In affected Kea versions (2.4.0–2.4.1, 2.6.0–2.6.2, 2.7.0–2.7.8), a malicious hook library could be loaded via configuration, enabling local privilege escalation. Related issues CVE-2025-32802/32803 involve insecure file paths/permissions. Remediatio...