Vulnerabilities in Kea DHCP and cyrus-imapd packages allow for privilege escalation in the system.
Vulnerabilities have been identified in the configurations of the Kea DHCP server, developed by the ISC consortium as a replacement for the classic ISC DHCP, used by various distributions. In certain situations, these vulnerabilities may allow a local user to execute code with root privileges or overwrite any file in the system: CVE-2025-32801 — allows a local user to gain root privileges on systems where Kea runs as the root user or gain full control […]
