CVE-2025-3576CWE-328

CVE-2025-3576

Medium · published April 15, 2025

CVSS v3.1
5.9
EPSS
0%
Percentile
27.5
In the wild
Unconfirmed
What it is

A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00351 · 27.5th percentile
Weakness
CWE-328 · Use of Weak Hash
Published
2025-04-15T10:15Z
References (16)
https://access.redhat.com/errata/RHSA-2025:11487 · [email protected]https://access.redhat.com/errata/RHSA-2025:13664 · [email protected]https://access.redhat.com/errata/RHSA-2025:13777 · [email protected]https://access.redhat.com/errata/RHSA-2025:15000 · [email protected]https://access.redhat.com/errata/RHSA-2025:15001 · [email protected]https://access.redhat.com/errata/RHSA-2025:15002 · [email protected]https://access.redhat.com/errata/RHSA-2025:15003 · [email protected]https://access.redhat.com/errata/RHSA-2025:15004 · [email protected]https://access.redhat.com/errata/RHSA-2025:8411 · [email protected]https://access.redhat.com/errata/RHSA-2025:9418 · [email protected]https://access.redhat.com/errata/RHSA-2025:9430 · [email protected]https://access.redhat.com/security/cve/CVE-2025-3576 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2359465 · [email protected]https://web.mit.edu/kerberos/krb5-1.22/krb5-1.22.html · [email protected]https://lists.debian.org/debian-lts-announce/2025/05/msg00047.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-577017.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 15 APR 05:55Z
    Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions
    cvelistv5