A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade krb5-server-ldapUpgrade krb5-libsUpgrade libkadm5Upgrade krb5-develUpgrade krb5-pkinitUpgrade krb5-serverUpgrade krb5-workstation | Jun 4, 2025 | Apr 15, 2025 |
| Amazon Linux Ami 2 | — | Upgrade krb5-pkinitUpgrade krb5-libsUpgrade krb5-develUpgrade krb5-debuginfoUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-workstationUpgrade krb5-server-ldap | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade krb5-pkinit-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-debugsourceUpgrade krb5-server-ldapUpgrade krb5-workstationUpgrade krb5-serverUpgrade libkadm5Upgrade krb5-develUpgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-libs-debuginfoUpgrade krb5-debuginfoUpgrade krb5-server-ldap-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-server-debuginfo | Sep 9, 2025 | Apr 15, 2025 |
| Debian | — | Upgrade krb5 | May 15, 2025 | Apr 15, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade krb5-serverUpgrade krb5-clientUpgrade krb5Upgrade krb5-libs | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade krb5-serverUpgrade krb5-clientUpgrade krb5-libsUpgrade krb5 | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade krb5-serverUpgrade krb5-libsUpgrade krb5-clientUpgrade krb5 | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade krb5Upgrade krb5-clientUpgrade krb5-serverUpgrade krb5-libs | Oct 24, 2025 | Oct 10, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 22, 2025 |
| Oracle_linux | — | Upgrade krb5-develUpgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-serverUpgrade krb5-libsUpgrade libkadm5 | Jun 4, 2025 | Apr 15, 2025 |
| Redhat_linux | — | Upgrade krb5-server-ldap-debuginfoUpgrade krb5-debuginfoUpgrade krb5-workstationUpgrade krb5-pkinit-debuginfoUpgrade krb5-libs-debuginfoNo solution existsUpgrade krb5-workstation-debuginfoUpgrade krb5-server-debuginfoUpgrade krb5-serverUpgrade libkadm5Upgrade krb5-develUpgrade libkadm5-debuginfoUpgrade krb5-pkinitUpgrade krb5-libsUpgrade krb5-server-ldapUpgrade krb5-debugsourceUpgrade krb5-devel-debuginfo | Jun 5, 2025 | Apr 15, 2025 |
| Rocky_linux | — | Upgrade krb5-pkinit-debuginfoUpgrade krb5-devel-debuginfoUpgrade krb5-workstation-debuginfoUpgrade krb5-pkinitUpgrade krb5-debugsourceUpgrade krb5-libsUpgrade krb5-server-ldap-debuginfoUpgrade krb5-debuginfoUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-server-debuginfoUpgrade libkadm5-debuginfoUpgrade krb5-serverUpgrade libkadm5Upgrade krb5-libs-debuginfoUpgrade krb5-workstation | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade krb5-plugin-preauth-pkinitUpgrade krb5-develUpgrade krb5-devel-32bitUpgrade krb5-serverUpgrade krb5-clientUpgrade krb5-plugin-kdb-ldapUpgrade krb5Upgrade krb5-plugin-preauth-otpUpgrade krb5-plugin-preauth-spakeUpgrade krb5-docUpgrade krb5-32bit | Oct 22, 2025 | Jun 4, 2025 |
| Ubuntu | — | Upgrade libk5crypto3 (Ubuntu Pro)Upgrade libkrb5-3 (Ubuntu Pro)Upgrade libk5crypto3Upgrade libkrb5-3 | May 29, 2025 | Apr 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub