Threat Intelligence Database

Red Hat Identity Management (IdM) has security vulnerabilities in the python-kdcproxy component, including an unauthenticated Server-Side Request Forgery (SSRF) via realm-controlled DNS SRV records (CVE-2025-59088) and a remote Denial of Service (DoS) via unbounded TCP upstream buffering (CVE-2025-59089). These issues affect Red Hat Enterprise Linux 8.6 variants. Red Hat has issued an important security update to address these vulnerabilities.

Red Hat Identity Management (IdM) has security vulnerabilities in the python-kdcproxy component, including an unauthenticated Server-Side Request Forgery (SSRF) via realm-controlled DNS SRV records (CVE-2025-59088) and a remote Denial of Service (DoS) via unbounded TCP upstream buffering (CVE-2025-59089). These issues affect Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Telecommunications Update Service. Red Hat has released an important security update to address these vulnerabilities.

Red Hat Identity Management (IdM) for Red Hat Enterprise Linux 8.2 contains two security vulnerabilities in the python-kdcproxy component. The first is an unauthenticated Server-Side Request Forgery (SSRF) via realm-controlled DNS SRV records (CVE-2025-59088). The second is a remote Denial of Service (DoS) caused by unbounded TCP upstream buffering (CVE-2025-59089). These issues have been addressed in an important security update released by Red Hat. The update is available for Red Hat Enterprise Linux Server AUS 8.2 x86_64. No CVSS scores are provided, but the vendor rates the impact as important. No known exploits in the wild have been reported.

Two security vulnerabilities have been identified in the python-kdcproxy component of Red Hat Enterprise Linux 9.4 Extended Update Support. The first is an unauthenticated Server-Side Request Forgery (SSRF) vulnerability via realm-controlled DNS SRV records (CVE-2025-59088). The second is a remote denial-of-service (DoS) vulnerability caused by unbounded TCP upstream buffering (CVE-2025-59089). Red Hat has released an important security update addressing these issues for multiple architectures and variants of RHEL 9.4.

Two security vulnerabilities were identified in the python-kdcproxy component of Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. The first is an unauthenticated Server-Side Request Forgery (SSRF) vulnerability via realm-controlled DNS SRV records (CVE-2025-59088). The second is a remote Denial of Service (DoS) vulnerability caused by unbounded TCP upstream buffering (CVE-2025-59089). Red Hat has released an important security update addressing these issues for multiple architectures and lifecycle variants of RHEL 9.2.

Red Hat Identity Management (IdM) for Red Hat Enterprise Linux 8 has security vulnerabilities in the python-kdcproxy component. These include an unauthenticated Server-Side Request Forgery (SSRF) via realm-controlled DNS SRV records (CVE-2025-59088) and a remote denial of service (DoS) caused by unbounded TCP upstream buffering (CVE-2025-59089). Red Hat has released an important security update addressing these issues.

Two security vulnerabilities were identified in python-kdcproxy, a Python module used in Red Hat Enterprise Linux 9.6 Extended Update Support. The first vulnerability (CVE-2025-59088) is an unauthenticated Server-Side Request Forgery (SSRF) via realm-controlled DNS SRV records. The second (CVE-2025-59089) is a remote denial-of-service (DoS) caused by unbounded TCP upstream buffering. Red Hat has issued an important security update addressing these issues for multiple architectures and variants of RHEL 9.6.

Two security vulnerabilities have been identified in the python-kdcproxy component of Red Hat Enterprise Linux 9. These include an unauthenticated Server-Side Request Forgery (SSRF) via realm-controlled DNS SRV records (CVE-2025-59088) and a remote denial of service (DoS) caused by unbounded TCP upstream buffering (CVE-2025-59089). Red Hat has issued an important security update addressing these issues. The update is available for multiple architectures and variants of Red Hat Enterprise Linux 9. Users are advised to apply the update as detailed in the Red Hat advisory.

Two security vulnerabilities have been identified in the python-kdcproxy component of Red Hat Enterprise Linux 10. The first is an unauthenticated Server-Side Request Forgery (SSRF) vulnerability via realm-controlled DNS SRV records (CVE-2025-59088). The second is a remote denial-of-service (DoS) vulnerability caused by unbounded TCP upstream buffering (CVE-2025-59089). These issues have been addressed in updated python-kdcproxy packages provided by Red Hat.

Two security vulnerabilities have been identified in python-kdcproxy, a component related to Python in Red Hat Enterprise Linux 10.0 Extended Update Support. The first vulnerability (CVE-2025-59088) allows unauthenticated Server-Side Request Forgery (SSRF) via realm-controlled DNS SRV records. The second (CVE-2025-59089) enables a remote denial of service (DoS) through unbounded TCP upstream buffering. Red Hat has released an important security update addressing these issues for multiple architectures of Red Hat Enterprise Linux 10.0. Users are advised to apply the update as detailed in the Red Hat advisory.