In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cyrus-saslUpgrade cyrus-sasl-libUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-sqlUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ldapUpgrade cyrus-sasl-scram | May 4, 2022 | Feb 24, 2022 |
| Alpine Linux | — | Upgrade cyrus-sasl | Mar 26, 2024 | Feb 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-develUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-gs2 | Jul 4, 2022 | Feb 24, 2022 |
| Amazon_linux | — | Upgrade cyrus-sasl | Mar 11, 2022 | Feb 22, 2022 |
| Amazon_linux_2023 | — | Upgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-develUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-libUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-saslUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-gssapi-debuginfo | Feb 17, 2025 | Feb 22, 2022 |
| Centos_linux | — | Upgrade cyrus-sasl-develUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl | Feb 24, 2022 | Feb 23, 2022 |
| Debian | — | Upgrade cyrus-sasl2 | Feb 28, 2022 | Feb 24, 2022 |
| Freebsd | — | Upgrade mysql-client80Upgrade mysql-server80Upgrade mysql-connector-c++Upgrade mysql-server57Upgrade mysql-client57Upgrade mysql-connector-odbcUpgrade cyrus-sasl-sql | Nov 4, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cyrus-sasl-libUpgrade cyrus-sasl | Jun 7, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cyrus-saslUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-develUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-libUpgrade cyrus-sasl-scram | May 25, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cyrus-sasl-develUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-libUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-md5Upgrade cyrus-sasl | Apr 26, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cyrus-sasl-develUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-libUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-ntlmUpgrade cyrus-saslUpgrade cyrus-sasl-md5 | Apr 26, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cyrus-saslUpgrade cyrus-sasl-lib | Jun 16, 2022 | Feb 24, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade cyrus-saslUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-libUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-md5 | Feb 24, 2022 | Feb 22, 2022 |
| Redhat_linux | — | Upgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-libUpgrade cyrus-saslUpgrade cyrus-sasl-develUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-sql-debuginfo | Feb 24, 2022 | Feb 23, 2022 |
| Rocky_linux | — | Upgrade cyrus-sasl-ldapUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-libUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-sql | Mar 5, 2024 | Feb 24, 2022 |
| Suse | — | Upgrade cyrus-sasl-openssl1-digestmd5-x86Upgrade cyrus-sasl-openssl1-crammd5-32bitUpgrade cyrus-sasl-openssl1-x86Upgrade cyrus-sasl-openssl1-gssapi-32bitUpgrade cyrus-sasl-openssl1-crammd5-x86Upgrade cyrus-sasl-digestmd5Upgrade cyrus-sasl-sqlauxpropUpgrade cyrus-sasl-bdb-crammd5Upgrade cyrus-sasl-bdb-plainUpgrade cyrus-sasl-digestmd5-32bitUpgrade cyrus-sasl-bdb-scramUpgrade cyrus-sasl-32bitUpgrade cyrus-sasl-bdb-otpUpgrade cyrus-sasl-openssl1-gssapiUpgrade cyrus-sasl-bdb-ntlmUpgrade cyrus-sasl-crammd5-32bitUpgrade cyrus-sasl-openssl1-otp-x86Upgrade libsasl2-3-32bitUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-develUpgrade cyrus-sasl-saslauthd-bdbUpgrade cyrus-sasl-ldap-auxpropUpgrade cyrus-sasl-openssl1-crammd5Upgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ldap-auxprop-bdbUpgrade cyrus-sasl-openssl1Upgrade cyrus-sasl-bdbUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-openssl1-digestmd5Upgrade cyrus-sasl-bdb-digestmd5Upgrade cyrus-sasl-gssapi-32bitUpgrade cyrus-sasl-openssl1-gssapi-x86Upgrade cyrus-sasl-otp-32bitUpgrade cyrus-sasl-openssl1-otp-32bitUpgrade cyrus-saslUpgrade cyrus-sasl-plain-32bitUpgrade nvidia-container-toolkitUpgrade cyrus-sasl-openssl1-ntlmUpgrade cyrus-sasl-openssl1-digestmd5-32bitUpgrade cyrus-sasl-devel-32bitUpgrade cyrus-sasl-otpUpgrade cyrus-sasl-openssl1-plain-32bitUpgrade cyrus-sasl-bdb-gssapiUpgrade cyrus-sasl-openssl1-plain-x86Upgrade cyrus-sasl-ldap-auxprop-32bitUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-bdb-develUpgrade cyrus-sasl-crammd5Upgrade cyrus-sasl-sqlauxprop-bdbUpgrade cyrus-sasl-openssl1-32bitUpgrade libsasl2-3Upgrade cyrus-sasl-sqlauxprop-32bitUpgrade cyrus-sasl-openssl1-otpUpgrade cyrus-sasl-bdb-gs2Upgrade cyrus-sasl-openssl1-plainUpgrade cyrus-sasl-saslauthdUpgrade cyrus-sasl-plain | Feb 24, 2022 | Feb 22, 2022 |
| Ubuntu | — | Upgrade libsasl2-modules-sqlUpgrade libsasl2-modules-sql (Ubuntu Pro) | Feb 23, 2022 | Feb 22, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub