CVE catalog
CVE-2025-59088
python-kdcproxy: CVE-2025-59088
- Severity
- High · CVSS 8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.49% · Oct 25, 2026
If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, since an attacker could send a request for a realm matching a DNS zone where they created SRV records pointing to arbitrary ports and hostnames (which may resolve to loopback or internal IP addresses). This vulnerability can be exploited to probe internal network topology and firewall rules, perform port scanning, and exfiltrate data. Deployments where the "use_dns" setting is explicitly set to false are not affected.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | python-kdcproxy | sid | 1.0.0-2.1 | vulnerable |
| Debian | python-kdcproxy | forky | 1.0.0-2.1 | vulnerable |
| Debian | python-kdcproxy | trixie | 1.0.0-2 | vulnerable |
| Debian | python-kdcproxy | bookworm | 1.0.0-1 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | python-kdcproxy | source | sid | (unfixed) | not yet assigned | Not reported | [1120702] |
| Debian | python-kdcproxy | source | forky | (unfixed) | not yet assigned | Not reported | [1120702] |
| Debian | python-kdcproxy | source | trixie | (unfixed) | not yet assigned | Not reported | [1120702] |
| Debian | python-kdcproxy | source | bookworm | (unfixed) | not yet assigned | Not reported | [1120702] |
Notes
[trixie] python-kdcproxy: Minor issue [bookworm] python-kdcproxy: Minor issue
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [python3-kdcproxy]Affected
Source package: [python-kdcproxy]
Details (2)
1.0.0-1· all · bookwormAffected
dsa · python-kdcproxy · debian · bookworm; dsa · python-kdcproxy · debian · 12
1.0.0-1· all · bookwormAffected
dsa · python-kdcproxy · debian · bookworm; dsa · python-kdcproxy · debian · 12
[Debian 13 (Trixie)]
- [python3-kdcproxy]Affected
Source package: [python-kdcproxy]
Details (2)
1.0.0-2· all · trixieAffected
dsa · python-kdcproxy · debian · 13
1.0.0-2· all · trixieAffected
dsa · python-kdcproxy · debian · 13
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_21139.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2025-59088]
- [https://security-tracker.debian.org/tracker/CVE-2025-59088]
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59088.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2586.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]