CVE-2018-5739

An extension to hooks capabilities which debuted in Kea 1.4.0 introduced a memory leak for operators who are using certain hooks library facilities. In order to support multiple requests simultaneously, Kea 1.4 added a callout handle store but unfortunately the initial implementation of this store does not properly free memory in every case. Hooks which make use of query4 or query6 parameters in their callouts can leak memory, resulting in the eventual exhaustion of available memory and subsequent failure of the server process. Affects Kea DHCP 1.4.0.

• CWE-772

• https://kb.isc.org/docs/aa-01626Vendor Advisory
• https://kb.isc.org/docs/aa-01626Vendor Advisory

Published

Jan 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5733A malicious client which is allowed to send very large amoun…7.5
• CVE-2018-5734While handling a particular type of malformed packet BIND er…7.5
• CVE-2018-5735The Debian backport of the fix for CVE-2017-3137 leads to as…7.5
• CVE-2018-5736An error in zone database reference counting can lead to an …
• CVE-2018-5737A problem with the implementation of the new serve-stale fea…5.9
• CVE-2018-5738Change #4777 (introduced in October 2017) introduced an unfo…5.3
• CVE-2018-5740"deny-answer-aliases" is a little-used feature intended to h…7.5
• CVE-2018-5741To provide fine-grained controls over the ability to use Dyn…6.5
• CVE-2018-5742While backporting a feature for a newer branch of BIND9, Red…7.5
• CVE-2018-5743By design, BIND is intended to limit the number of TCP clien…7.5
• CVE-2018-5744A failure to free memory can occur when processing messages …7.5
• CVE-2018-5745"managed-keys" is a feature which allows a BIND resolver to …4.9