Astra Linux - Vulnerability in python-kdcproxy

If kdcproxy receives a request for a realm that does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, since an attacker could send a request fo...