products / mit_kerberos

MIT Kerberos

MIT Kerberos is the reference Kerberos 5 implementation used by Linux, macOS, and countless enterprise identity stacks. Ingestion uses cpe:2.3:a:mit:kerberos_5 and the keyword MIT Kerberos (not bare "Kerberos") to reduce false positives from other vendors.

api usage

Querying MIT Kerberos

product slugmit_kerberos

version format1.20.0, 1.21.3, semver

bash

curl "https://api.attestd.io/v1/check?product=mit_kerberos&version=1.20.0" \
  -H "Authorization: Bearer $ATTESTD_KEY"

json

{
  "product": "mit_kerberos",
  "version": "1.20.0",
  "supported": true,
  "risk_state": "high",
  "risk_factors": [
    "memory_corruption",
    "patch_available",
    "internet_exposed_service"
  ],
  "actively_exploited": false,
  "remote_exploitable": true,
  "authentication_required": false,
  "patch_available": true,
  "fixed_version": "1.20.1",
  "confidence": 0.74,
  "cve_ids": ["CVE-2023-36054"],
  "last_updated": "2026-05-13T18:00:00Z",
  "supply_chain": null
}

safe version

bash

curl "https://api.attestd.io/v1/check?product=mit_kerberos&version=1.21.3" \
  -H "Authorization: Bearer $ATTESTD_KEY"

notable cves

CVE history

CVE	Description	CVSS
`CVE-2023-36054`	Free of uninitialized memory in lib/kadm5 admin RPC path.	6.5

All products FreeIPA Samba Response Field Reference