PT-2025-16295 · Mit+9 · Mit Kerberos+9

Published 2025-04-15 · Updated 2025-10-22 · CVE-2025-3576

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions MIT Kerberos (affected versions not specified)

Description The issue concerns a weakness in the MD5 checksum design, allowing GSSAPI-protected messages that use RC4-HMAC-MD5 to be spoofed. If RC4 is preferred over more robust encryption types, an attacker could exploit MD5 collisions to forge message integrity codes, potentially leading to unauthorized message tampering.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-328

Related Identifiers

ALSA-2025:8411

ALSA-2025:9418

ALSA-2025:9430

AZL-60928

BDU:2025-10927

CESA-2025_8411

CVE-2025-3576

DLA-4195-1

ECHO-64EE-F30C-7BC0

INFSA-2025_8411

INFSA-2025_9430

OESA-2025-2124

OESA-2025-2125

OESA-2025-2126

RHSA-2025:13664

RHSA-2025:13777

RHSA-2025:15000

RHSA-2025:15001

RHSA-2025:15002

RHSA-2025:15003

RHSA-2025:15004

RHSA-2025:8411

RHSA-2025:9418

RHSA-2025:9430

RHSA-2025_8411

RHSA-2025_9430

SUSE-SU-2025:03227-1

SUSE-SU-2025:03270-1

SUSE-SU-2025:20719-1

SUSE-SU-2025:3698-1

SUSE-SU-2025:3699-1

SUSE-SU-2025:3729-1

SUSE-SU-2025_3698-1

SUSE-SU-2025_3699-1

USN-7542-1

Affected Products

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Mit Kerberos

Red Hat

Rocky Linux

Suse

Ubuntu

References · 75

• https://osv.dev/vulnerability/ALSA-2025:8411 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-9430.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:9418 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3729-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10927 · Security Note
• https://linux.oracle.com/errata/ELSA-2025-8411.html · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-3576 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:13664 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:15000 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2126 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:9430 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3698-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:8411 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7542-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-3576 · Security Note