The vulnerability in latchset's kdcproxy (CVE-2025-59089) involves the allocation of resources without limits or throttling when processing TCP responses from KDC servers. Specifically, kdcproxy copies the entire buffered stream into a new buffer on each recv() call, even if the transfer is incomplete, causing excessive memory and CPU consumption. Additionally, it accepts incoming response chunks as long as the received data length does not exactly match the length indicated in the response header, allowing an attacker to send unbounded data until the connection times out (about 12 seconds). Multiple concurrent exploit attempts can overflow the accept queue, resulting in denial of service to legitimate clients. This vulnerability has a CVSS v3.1 base score of 5.9 (medium severity) with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts availability only. Red Hat has issued official patches for python-kdcproxy in Red Hat Enterprise Linux 9.6 and 9 to remediate this issue.

Exploitation of this vulnerability allows an unauthenticated attacker to cause a denial-of-service condition by exhausting memory and CPU resources on the server running kdcproxy. This can also lead to accept queue overflow, preventing legitimate clients from connecting. There is no impact on confidentiality or integrity reported. The CVSS score of 5.9 reflects a medium severity availability impact with network attack vector and high attack complexity.

Official patches are available from Red Hat for python-kdcproxy in Red Hat Enterprise Linux 9 and 9.6 Extended Update Support releases. Users should apply these updates promptly as detailed in Red Hat advisories RHSA-2025:21138 and RHSA-2025:21139. The vendor advisory explicitly states the availability of these fixes and provides instructions for updating. No additional mitigation steps are indicated beyond applying the official patches.