[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3Ym3c0hBy9cf_nKfUW8zzvtybzxEBHHD-C8Ieh6Biwc":3,"g5a-risk:CVE-2019-6474":121},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":58,"references":59,"referencesCount":65,"weaknesses":66,"weaknessesCount":65,"isActivelyExploited":75,"cisaInfo":27,"otxData":27,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":117,"notableEvents":118},"CVE-2019-6474","What is CVE-2019-6474?","A missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage contains leases which are rejected as invalid when the server tries to load leases from storage on restart. If the number of such leases exceeds a hard-coded limit in the Kea code, a server trying to restart will conclude that there is a problem with its lease store and give up. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2","A missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage contains leases which are rejected as ...","2019-10-16T18:15:37.217","2020-08-24T17:37:01.14",6.5,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":38,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","ADJACENT_NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":29},"security-officer@isc.org","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":35,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":36,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H","REQUIRED",5.7,2.1,[39],{"Source":17,"Type":18,"CVSSData":40,"BaseSeverity":26,"ExploitabilityScore":12,"ImpactScore":45,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":41,"VectorString":42,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:A\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:C","COMPLETE",6.1,6.9,0.00717,[46,46,46,46,46,46,46],"Medium",[50,55],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"isc","kea","*","cpe:2.3:a:isc:kea:*:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":56,"criteria":57,"vulnerable":4},"1.6.0","cpe:2.3:a:isc:kea:1.6.0:beta1:*:*:*:*:*:*",2,[60],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fkb.isc.org\u002Fdocs\u002Fcve-2019-6474","Isc",[64],"Vendor Advisory",1,[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-772","Missing Release of Resource after Effective Lifetime","The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.","When a resource is not released after use, it can allow attackers to cause a denial of service by causing the allocation of resources without triggering their release. Frequently-affected resources include memory, CPU, disk space, power or battery, etc.","Draft","Base","Simple",false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2019-6474? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-6474, a medium severity cyber security vulnerability from 2019. A missing check on incoming client requests can be exploit...","CVE-2019-6474, CVE-2019-6474 vulnerability, CVE-2019-6474 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, isc security, kea vulnerability","\u002Fwhat-is\u002Fcve-2019-6474",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-6474","Cybersecurity","CVE-2019-6474, CVE-2019-6474 vulnerability, CVE-2019-6474 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":27,"Negate":27,"Nodes":104},[105],{"Operator":106,"Negate":27,"CPEMatch":107},"OR",[108,112,114],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":109,"VersionStartExcluding":27,"VersionStartIncluding":110,"VersionEndExcluding":27,"VersionEndIncluding":111},"27BBC7E1-37AF-4BC6-BA53-09CF7B8921BB","1.4.0","1.5.0",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":113,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"43793833-7D0F-4C7C-80B4-F8563AD23607",{"Vulnerable":4,"Criteria":115,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:isc:kea:1.6.0:beta2:*:*:*:*:*:*","AECDE26A-DDFD-4035-A08E-E7A5CA37F1E8",[],[],{"lastModified":11,"cacheTime":120,"version":41},1792240267516,{"score":122,"band":123,"action":124,"scoredAt":125},23,"Low","Monitor","2026-10-16T06:47:05.93008+00:00"]