cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cyrus-sasl-sql | May 4, 2022 | Dec 19, 2019 |
| Alpine Linux | — | Upgrade cyrus-sasl | Dec 27, 2019 | Dec 19, 2019 |
| Apple Osx Mail | — | Upgrade macOS to the latest version | Jul 16, 2020 | Dec 19, 2019 |
| Centos_linux | — | Upgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-libUpgrade cyrus-sasl-develUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-saslUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-md5-debuginfo | Nov 5, 2020 | Dec 19, 2019 |
| Debian | — | Upgrade cyrus-sasl2 | Dec 23, 2019 | Dec 19, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade cyrus-sasl | Nov 4, 2022 | Feb 28, 2022 |
| Huawei Euleros 2_0_sp2 | — | Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-develUpgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5 | Jun 17, 2020 | Dec 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cyrus-sasl-gssapiUpgrade cyrus-saslUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-develUpgrade cyrus-sasl-scram | Apr 16, 2020 | Dec 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cyrus-sasl-md5Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-develUpgrade cyrus-sasl-libUpgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-gssapi | Nov 2, 2020 | Dec 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cyrus-sasl-gs2Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-develUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-lib | Feb 26, 2020 | Dec 19, 2019 |
| Oracle_linux | — | Upgrade cyrus-sasl-libUpgrade cyrus-sasl-develUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ldapUpgrade cyrus-saslUpgrade cyrus-sasl-plain | Nov 17, 2020 | Nov 28, 2019 |
| Redhat_linux | — | Upgrade cyrus-sasl-sqlUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-libUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-saslUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gs2No solution existsUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-develUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-debuginfo | Nov 5, 2020 | Dec 19, 2019 |
| Rocky_linux | — | Upgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-libUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-develUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-gssapiUpgrade cyrus-saslUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-ntlm-debuginfo | Mar 12, 2024 | Dec 19, 2019 |
| Suse | — | Upgrade cyrus-sasl-openssl1-32bitUpgrade cyrus-sasl-openssl1-gssapi-x86Upgrade cyrus-sasl-otp-32bitUpgrade cyrus-sasl-openssl1-plainUpgrade cyrus-sasl-digestmd5-32bitUpgrade cyrus-sasl-crammd5Upgrade cyrus-sasl-bdb-ntlmUpgrade cyrus-sasl-bdb-plainUpgrade cyrus-sasl-otpUpgrade cyrus-sasl-openssl1-crammd5-x86Upgrade libsasl2-3Upgrade libsasl2-3-32bitUpgrade cyrus-sasl-sqlauxprop-32bitUpgrade cyrus-sasl-openssl1-gssapi-32bitUpgrade cyrus-sasl-openssl1-digestmd5Upgrade cyrus-sasl-bdb-develUpgrade cyrus-sasl-openssl1-digestmd5-32bitUpgrade cyrus-sasl-openssl1Upgrade cyrus-sasl-plain-32bitUpgrade cyrus-sasl-crammd5-32bitUpgrade cyrus-sasl-openssl1-digestmd5-x86Upgrade cyrus-sasl-openssl1-otpUpgrade cyrus-sasl-bdb-otpUpgrade cyrus-sasl-32bitUpgrade cyrus-sasl-bdb-digestmd5Upgrade cyrus-sasl-sqlauxpropUpgrade cyrus-sasl-openssl1-otp-32bitUpgrade cyrus-sasl-bdb-scramUpgrade cyrus-sasl-gssapi-32bitUpgrade cyrus-sasl-openssl1-crammd5Upgrade cyrus-sasl-openssl1-plain-x86Upgrade cyrus-sasl-bdbUpgrade cyrus-sasl-openssl1-plain-32bitUpgrade cyrus-sasl-saslauthdUpgrade cyrus-sasl-develUpgrade cyrus-sasl-openssl1-otp-x86Upgrade cyrus-sasl-saslauthd-bdbUpgrade cyrus-sasl-openssl1-gssapiUpgrade cyrus-sasl-bdb-gs2Upgrade cyrus-sasl-openssl1-crammd5-32bitUpgrade cyrus-sasl-openssl1-ntlmUpgrade cyrus-saslUpgrade cyrus-sasl-bdb-gssapiUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-sqlauxprop-bdbUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-digestmd5Upgrade cyrus-sasl-openssl1-x86 | Dec 18, 2020 | Dec 19, 2019 |
| Ubuntu | — | Upgrade libsasl2-2Upgrade libsasl2-2 (Ubuntu Pro) | Jan 29, 2020 | Dec 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub