PT-2025-46675 · Kdcproxy+6 · Kdcproxy+6
Published
2025-11-12
·
Updated
2026-01-29
·
CVE-2025-59088
CVSS v3.1
8.6
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
kdcproxy (affected versions not specified)
Description
kdcproxy is susceptible to a server-side request forgery condition. When kdcproxy processes a request for a realm lacking defined server addresses in its configuration, it defaults to querying SRV records in the DNS zone corresponding to the requested realm. This behavior allows attackers to leverage maliciously crafted SRV records pointing to arbitrary hostnames and ports, potentially enabling them to probe internal network topology, perform port scanning, and exfiltrate data. Deployments where the
use dns setting is explicitly set to false are not affected.Recommendations
Ensure the
use dns setting is explicitly set to false in the kdcproxy configuration.Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Centos
Debian
Red Hat
Red Os
Rocky Linux
Kdcproxy