CVE-2025-11419

High CVSS: 7.5

A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailable.

Vendor

Product

CWE

CWE-770

Yayın Tarihi

2025-12-23 21:15:46

Güncelleme

2025-12-29 15:58:56

Source Identifier

secalert@redhat.com

KEV Date Added

Kategoriler

CWE-770 HIGH 2025

Referanslar

https://access.redhat.com/errata/RHSA-2025:18254 https://access.redhat.com/errata/RHSA-2025:18255 https://access.redhat.com/errata/RHSA-2025:18889 https://access.redhat.com/errata/RHSA-2025:18890 https://access.redhat.com/security/cve/CVE-2025-11419 https://bugzilla.redhat.com/show_bug.cgi?id=2402142