mit kerberos

Name: mit kerberos
Brand: mit

productUS

cpe:2.3:a:mit:kerberos:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical12high18medium3low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2001-0554US	high10.0	38.7% (99th)	Exploit	no fix	2001-08-14	= 1.0
CVE-2000-0389US	high10.0	16.5% (97th)	Exploit	no fix	2000-05-16	= 4.0
CVE-2004-0523US	high10.0	11.7% (96th)	—	no fix	2004-08-18	3 versions
CVE-2009-4212US	high10.0	7.55% (94th)	—	no fix	2010-01-13	= 5-1.6.3
CVE-2014-4342US	medium5.0	6.52% (94th)	—	no fix	2014-07-20	4 versions
CVE-2009-0845US	medium5.0	5.63% (93rd)	—	no fix	2009-03-27	= 5-1.6.3
CVE-2009-0844US	medium5.8	4.32% (91st)	—	no fix	2009-04-09	= 5-1.6.3
CVE-2003-0138US	high7.5OT elevated	4.28% (91st)	—	no fix	2003-03-24	= 4
CVE-2003-0139US	high7.5OT elevated	4.28% (91st)	—	no fix	2003-03-24	= 4
CVE-2011-0281US	medium5.0	4.20% (91st)	—	no fix	2011-02-10	= 5-1.6.3
CVE-2000-0390US	high10.0	4.03% (91st)	—	no fix	2000-05-16	= 4.0
CVE-2000-0391US	high10.0	4.03% (91st)	—	no fix	2000-05-16	= 4.0
CVE-2011-0282US	medium5.0	3.48% (89th)	—	no fix	2011-02-10	= 5-1.6.3
CVE-2000-0546US	medium5.0	2.89% (87th)	—	4.0	2000-06-09	2 versions
CVE-2000-0547US	medium5.0	2.89% (87th)	—	4.0	2000-06-09	2 versions
CVE-2000-0548US	medium5.0	2.89% (87th)	—	4.0	2000-06-09	2 versions
CVE-2010-1323US	low3.7	2.85% (87th)	—	no fix	2010-12-02	= 5-1.5.4
CVE-2009-0847US	medium4.3	2.77% (86th)	—	no fix	2009-04-09	= 5-1.6.3
CVE-2003-0082US	medium5.0	2.69% (86th)	—	no fix	2003-04-02	2 versions
CVE-2013-6800US	medium4.0	2.61% (85th)	—	no fix	2013-11-18	3 versions
CVE-2010-0283US	high7.8	2.41% (84th)	—	no fix	2010-02-22	= 5-1.8
CVE-2000-0550US	medium5.0	2.40% (84th)	—	no fix	2000-06-09	= 4.0
CVE-2017-11368US	medium6.5	2.40% (84th)	—	no fix	2017-08-09	= 5-1.13.7
CVE-2000-0549US	medium5.0	2.28% (83rd)	—	no fix	2000-06-09	= 4.0
CVE-2018-5709US	high7.5	2.05% (81st)	—	no fix	2018-01-16	≤ 5-1.16
CVE-1999-1321US	high7.5	1.98% (80th)	—	no fix	1998-11-05	= v
CVE-2003-0072US	medium5.0	1.95% (80th)	—	no fix	2003-04-02	2 versions
CVE-2018-5710US	medium6.5	1.80% (78th)	—	no fix	2018-01-16	≤ 5-1.16
CVE-2014-5354US	low3.5	1.74% (78th)	—	no fix	2014-12-16	= 5_1.13
CVE-2018-20217US	medium5.3	1.42% (73rd)	—	5-1.17	2018-12-26	< 5-1.17
CVE-2000-0392US	high7.2	0.44% (38th)	—	no fix	2000-05-16	= 4.0
CVE-2001-0417US	low2.1OT elevated	0.41% (35th)	—	no fix	2001-06-27	= 4
CVE-1999-0143US	medium4.6OT elevated	0.39% (32nd)	—	no fix	1996-02-21	= 4.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer9 CVEs
CWE-476NULL Pointer Dereference7 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')4 CVEs
CWE-310CWE-3103 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-189CWE-1892 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan