Red Hat Security Advisory: python-kdcproxy security update

Fixed packages 2

Vulnerabilities 2

• High 8.6
  CVE-2025-59088

  Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv

  If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, si…

  Red Hat Latchset Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Nov 12, 2025
• Medium 5.9
  CVE-2025-59089

  Python-kdcproxy: remote dos via unbounded tcp upstream buffering

  If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. through server-side request forgery), they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-service attack. While rece…

  Red Hat Latchset Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Nov 12, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393955
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393958
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21748.json
• report
  https://access.redhat.com/security/cve/CVE-2025-59088
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-59088
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-59088
• article
  https://github.com/latchset/kdcproxy/pull/68
• report
  https://access.redhat.com/security/cve/CVE-2025-59089
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-59089
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-59089
• article
  https://github.com/latchset/kdcproxy/commit/c7675365aa20be11f03247966336c7613cac84e1