The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, since an attacker could send a request for a realm matching a DNS zone where they created SRV records pointing to arbitrary ports and hostnames (which may resolve to loopback or internal IP addresses). This vulnerability can be exploited to probe internal network topology and firewall rules, perform port scanning, and exfiltrate data. Deployments where the "use_dns" setting is explicitly set to false are not affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ipa-client-epnUpgrade python3-kdcproxyUpgrade ipa-healthcheckUpgrade ipa-server-trust-adUpgrade python3-custodiaUpgrade ipa-healthcheck-coreUpgrade slapi-nisUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade python3-ipatestsUpgrade ipa-selinuxUpgrade python3-yubicoUpgrade python3-qrcodeUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-ipaserverUpgrade python3-ipalibUpgrade ipa-clientUpgrade ipa-client-sambaUpgrade opendnssecUpgrade ipa-client-commonUpgrade custodiaUpgrade ipa-commonUpgrade softhsm-develUpgrade softhsmUpgrade ipa-server-commonUpgrade python3-jwcryptoUpgrade bind-dyndb-ldapUpgrade python3-ipaclientUpgrade ipa-python-compat | Nov 20, 2025 | Nov 12, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python-kdcproxy | May 20, 2026 | May 20, 2026 |
| Oracle_linux | — | Upgrade ipa-healthcheck-coreUpgrade softhsmUpgrade ipa-client-sambaUpgrade ipa-server-dnsUpgrade ipa-client-epnUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade ipa-server-commonUpgrade python3-qrcodeUpgrade python3-ipaclientUpgrade python3-qrcode-coreUpgrade bind-dyndb-ldapUpgrade ipa-client-commonUpgrade python3-custodiaUpgrade ipa-serverUpgrade opendnssecUpgrade ipa-healthcheckUpgrade ipa-clientUpgrade python-kdcproxyUpgrade custodiaUpgrade python3-ipaserverUpgrade python3-jwcryptoUpgrade python3-yubicoUpgrade python3-ipalibUpgrade ipa-commonUpgrade ipa-server-trust-adUpgrade slapi-nisUpgrade softhsm-develUpgrade ipa-selinuxUpgrade python3-ipatestsUpgrade ipa-python-compat | Nov 17, 2025 | Nov 12, 2025 |
| Redhat_linux | — | Upgrade python3-ipatestsUpgrade ipa-client-commonUpgrade ipa-server-debuginfoUpgrade python3-pyusbUpgrade opendnssec-debugsourceUpgrade ipa-commonUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-yubicoUpgrade softhsm-debuginfoUpgrade ipa-server-commonUpgrade ipa-server-trust-adUpgrade ipa-client-debuginfoUpgrade softhsm-debugsourceUpgrade ipa-debugsourceUpgrade ipa-selinuxUpgrade python3-kdcproxyUpgrade custodiaUpgrade bind-dyndb-ldapUpgrade slapi-nis-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-ipalibUpgrade ipa-healthcheckUpgrade python3-ipaclientUpgrade ipa-serverUpgrade python3-custodiaUpgrade ipa-python-compatUpgrade python3-qrcode-coreUpgrade python3-ipaserverUpgrade ipa-clientUpgrade ipa-client-epnUpgrade python-kdcproxyUpgrade ipa-debuginfoUpgrade python3-jwcryptoUpgrade softhsmUpgrade ipa-healthcheck-coreUpgrade ipa-server-dnsUpgrade python3-qrcodeUpgrade slapi-nisUpgrade slapi-nis-debugsourceUpgrade ipa-client-sambaUpgrade opendnssecUpgrade bind-dyndb-ldap-debuginfoUpgrade softhsm-develUpgrade opendnssec-debuginfo | Nov 14, 2025 | Nov 12, 2025 |
| Rocky_linux | — | Upgrade softhsm-debuginfoUpgrade ipa-debugsourceUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-client-epnUpgrade bind-dyndb-ldapUpgrade softhsmUpgrade slapi-nis-debuginfoUpgrade ipa-serverUpgrade ipa-client-sambaUpgrade bind-dyndb-ldap-debuginfoUpgrade opendnssec-debuginfoUpgrade opendnssecUpgrade slapi-nisUpgrade ipa-server-trust-adUpgrade slapi-nis-debugsourceUpgrade ipa-debuginfoUpgrade softhsm-develUpgrade ipa-client-debuginfoUpgrade softhsm-debugsourceUpgrade ipa-clientUpgrade ipa-server-debuginfoUpgrade opendnssec-debugsource | Feb 5, 2026 | Nov 21, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub