CVE-2025-3576
Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions
CVSS Score
5.9
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.
| CWE | CWE-328 |
| Published | Apr 15, 2025 |
| Last Updated | May 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for
Be the first to know when new medium vulnerabilities are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Affected Versions
Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 8
All versions affected Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service
All versions affected Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support
All versions affected Red Hat / Red Hat Discovery 2
All versions affected Red Hat / Red Hat Enterprise Linux 6
All versions affected Red Hat / Red Hat Enterprise Linux 7
All versions affected Red Hat / Red Hat OpenShift Container Platform 4
All versions affected References
access.redhat.com: https://access.redhat.com/errata/RHSA-2025:11487 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:13664 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:13777 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:15000 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:15001 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:15002 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:15003 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:15004 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:8411 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:9418 access.redhat.com: https://access.redhat.com/errata/RHSA-2025:9430 access.redhat.com: https://access.redhat.com/security/cve/CVE-2025-3576 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2359465 web.mit.edu: https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.html lists.debian.org: https://lists.debian.org/debian-lts-announce/2025/05/msg00047.html cert-portal.siemens.com: https://cert-portal.siemens.com/productcert/html/ssa-577017.html