The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9430 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix(es):

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9430 advisory.

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13777 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix(es):

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8411 advisory.

    - Don't issue RC4 session keys by default (CVE-2025-3576)       Resolves: RHEL-88049

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to     be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption     types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to     unauthorized message tampering.(CVE-2025-3576)

Tenable has extracted the preceding description block directly from the EulerOS krb5 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to     be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption     types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to     unauthorized message tampering.(CVE-2025-3576)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization krb5 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3de9fe91ff advisory.

    * Disallowing use of the `arcfour-hmac(-md5)` encryption type for session keys
    * Add support for the PKINIT paChecksum2 sequence, required for Active Directory interoperability on     Windows Server 2025
    * Fix generation of RADIUS Message-Authenticator in FIPS mode



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-42a13f896e advisory.

    * Disallowing use of the `arcfour-hmac(-md5)` encryption type for session keys
    * Add support for the PKINIT paChecksum2 sequence, required for Active Directory interoperability on     Windows Server 2025
    * Fix generation of RADIUS Message-Authenticator in FIPS mode


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15003 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix(es):

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7542-1 advisory.

    It was discovered that Kerberos allowed the usage of weak cryptographic standards. An attacker could     possibly use this issue to expose sensitive information.

    This update introduces the allow_rc4 and allow_des3 configuration options, and disables the usage of RC4     and 3DES ciphers by default. Users are advised to discontinue their usage and upgrade to stronger     encryption protocols. If the use of the insecure RC4 and 3DES algorithms is necessary, they can be enabled     with the aforementioned configuration options.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0454 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2025-3576:
    A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to     be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption     types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to     unauthorized message tampering.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:8411 advisory.

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13664 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix(es):

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2985 advisory.

    krb5: overflow when calculating ulog block size (CVE-2025-24528)

    A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to     be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption     types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to     unauthorized message tampering. (CVE-2025-3576)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
240472	RHEL 9 : krb5 (RHSA-2025:9430)	Nessus	Red Hat Local Security Checks	2025/6/25	2025/10/9	medium
266543	RockyLinux 9 : krb5 (RLSA-2025:9430)	Nessus	Rocky Linux Local Security Checks	2025/10/4	2025/10/4	medium
249261	RHEL 9 : krb5 (RHSA-2025:13777)	Nessus	Red Hat Local Security Checks	2025/8/14	2025/8/14	medium
237720	Oracle Linux 8 : krb5 (ELSA-2025-8411)	Nessus	Oracle Linux Local Security Checks	2025/6/3	2025/6/3	medium
271340	EulerOS 2.0 SP13 : krb5 (EulerOS-SA-2025-2265)	Nessus	Huawei Local Security Checks	2025/10/24	2025/10/24	medium
279339	EulerOS Virtualization 2.13.0 : krb5 (EulerOS-SA-2025-2582)	Nessus	Huawei Local Security Checks	2025/12/18	2025/12/18	medium
237971	Fedora 42 : krb5 (2025-3de9fe91ff)	Nessus	Fedora Local Security Checks	2025/6/9	2025/6/9	medium
238038	Fedora 41 : krb5 (2025-42a13f896e)	Nessus	Fedora Local Security Checks	2025/6/10	2025/6/10	medium
260464	RHEL 8 : krb5 (RHSA-2025:15003)	Nessus	Red Hat Local Security Checks	2025/9/2	2025/9/2	medium
237448	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Kerberos vulnerability (USN-7542-1)	Nessus	Ubuntu Local Security Checks	2025/5/29	2025/5/29	medium
276257	TencentOS Server 3: krb5 (TSSA-2025:0454)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	medium
243125	RockyLinux 8 : krb5 (RLSA-2025:8411)	Nessus	Rocky Linux Local Security Checks	2025/7/30	2025/7/30	medium
249096	RHEL 9 : krb5 (RHSA-2025:13664)	Nessus	Red Hat Local Security Checks	2025/8/12	2025/8/12	medium
261347	Amazon Linux 2 : krb5, --advisory ALAS2-2025-2985 (ALAS-2025-2985)	Nessus	Amazon Linux Local Security Checks	2025/9/4	2025/9/4	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium