Vulnerability · Published Apr 15, 2025 · Assigned by redhat
CVE-2025-3576Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions
Medium 5.9
In plain English
A medium-severity security flaw in krb5. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:10 | krb5-devel | 1.21.3-8.el10_0 | ALSA-2025:9418 |
| AlmaLinux:8 | krb5-devel | 1.18.2-32.el8_10 | ALSA-2025:8411 |
| AlmaLinux:9 | krb5-devel | 1.21.1-8.el9_6 | ALSA-2025:9430 |
| AlmaLinux:10 | krb5-libs | 1.21.3-8.el10_0 | ALSA-2025:9418 |
| AlmaLinux:8 | krb5-libs | 1.18.2-32.el8_10 | ALSA-2025:8411 |
| AlmaLinux:9 | krb5-libs | 1.21.1-8.el9_6 | ALSA-2025:9430 |
| AlmaLinux:10 | krb5-pkinit | 1.21.3-8.el10_0 | ALSA-2025:9418 |
| AlmaLinux:8 | krb5-pkinit | 1.18.2-32.el8_10 | ALSA-2025:8411 |
| AlmaLinux:9 | krb5-pkinit | 1.21.1-8.el9_6 | ALSA-2025:9430 |
| AlmaLinux:10 | krb5-server | 1.21.3-8.el10_0 | ALSA-2025:9418 |
| AlmaLinux:8 | krb5-server | 1.18.2-32.el8_10 | ALSA-2025:8411 |
| AlmaLinux:9 | krb5-server | 1.21.1-8.el9_6 | ALSA-2025:9430 |
| AlmaLinux:10 | krb5-server-ldap | 1.21.3-8.el10_0 | ALSA-2025:9418 |
| AlmaLinux:8 | krb5-server-ldap | 1.18.2-32.el8_10 | ALSA-2025:8411 |
| AlmaLinux:9 | krb5-server-ldap | 1.21.1-8.el9_6 | ALSA-2025:9430 |
| AlmaLinux:10 | krb5-workstation | 1.21.3-8.el10_0 | ALSA-2025:9418 |
| AlmaLinux:8 | krb5-workstation | 1.18.2-32.el8_10 | ALSA-2025:8411 |
| AlmaLinux:9 | krb5-workstation | 1.21.1-8.el9_6 | ALSA-2025:9430 |
| AlmaLinux:10 | libkadm5 | 1.21.3-8.el10_0 | ALSA-2025:9418 |
| AlmaLinux:8 | libkadm5 | 1.18.2-32.el8_10 | ALSA-2025:8411 |
| AlmaLinux:9 | libkadm5 | 1.21.1-8.el9_6 | ALSA-2025:9430 |
| Debian:12 | krb5 | 1.20.1-2+deb12u4 | DEBIAN-CVE-2025-3576 |
| Debian:13 | krb5 | 1.21.2-1 | DEBIAN-CVE-2025-3576 |
| Debian:14 | krb5 | 1.21.2-1 | DEBIAN-CVE-2025-3576 |
| Rocky Linux:10 | krb5 | 0:1.21.3-8.el10_0 | RLSA-2025:9418 |
| Rocky Linux:8 | krb5 | 0:1.18.2-32.el8_10 | RLSA-2025:8411 |
| Rocky Linux:9 | krb5 | 0:1.21.1-8.el9_6 | RLSA-2025:9430 |
| Ubuntu:22.04:LTS | krb5 | 1.19.2-2ubuntu0.7 | USN-7542-1 |
| Ubuntu:22.04:LTS | krb5 | 1.19.2-2ubuntu0.7 | UBUNTU-CVE-2025-3576 |
| Ubuntu:24.04:LTS | krb5 | 1.20.1-6ubuntu2.6 | UBUNTU-CVE-2025-3576 |
| Ubuntu:24.04:LTS | krb5 | 1.20.1-6ubuntu2.6 | USN-7542-1 |
Affected products (as reported)
Weakness: CWE-328 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
References
- RHSA-2025:11487 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:13664 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:13777 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:15000 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:15001 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:15002 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:15003 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:15004 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:8411 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9418 vendor-advisory, x_refsource_REDHAT
- RHSA-2025:9430 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2025-3576 vdb-entry, x_refsource_REDHAT
- RHBZ#2359465 issue-tracking, x_refsource_REDHAT
- https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00047.html
- https://cert-portal.siemens.com/productcert/html/ssa-577017.html