CVE-2025-32803 — MEDIUM (4.0)

Vulnerability Description

In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

CVSS Score

4.0

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE

Related Weaknesses (CWE)

CWE-276

References

https://kb.isc.org/docs/cve-2025-32803

FAQ

What is CVE-2025-32803?

CVE-2025-32803 is a vulnerability with a CVSS score of 4.0 (MEDIUM). In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

How severe is CVE-2025-32803?

CVE-2025-32803 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-32803?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.