TI-2025-36704 CVE-2025-59089 · GHSA-hxcg-77v3-qx52
Python-kdcproxy: remote dos via unbounded tcp upstream buffering
Priority LOW 27
If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g.
Vulnerabilities
2 records
Advisory: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 16 more products — RHSA-2025:21140 Clear all filters
TI-2025-36703 CVE-2025-59088 · GHSA-crfg-8xhr-7q4w
Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv
Priority MEDIUM 44
If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name.