The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Cyrussasl | — | Apply OS X security update 2010-002 | Dec 16, 2011 | May 15, 2009 |
| Centos_linux | — | Upgrade cyrus-imapd-perlUpgrade cyrus-imapdUpgrade cyrus-imapd-develUpgrade cyrus-imapd-utils | Dec 1, 2016 | May 15, 2009 |
| Debian | — | Upgrade cyrus-sasl2 | Jul 30, 2024 | May 15, 2009 |
| Freebsd | — | Upgrade cyrus-sasl | Dec 10, 2025 | May 15, 2009 |
| Gentoo Linux | — | Upgrade dev-libs/cyrus-sasl. | Oct 30, 2017 | May 15, 2009 |
| Oracle_linux | — | Upgrade cyrus-imapd-develUpgrade cyrus-imapdUpgrade cyrus-imapd-perlUpgrade cyrus-imapd-utils | Oct 16, 2024 | May 15, 2009 |
| Suse | — | Upgrade cyrus-sasl-gs2Upgrade cyrus-sasl-digestmd5-32bitUpgrade cyrus-sasl-otpUpgrade libsasl2-3-32bitUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gssapi-x86Upgrade cyrus-sasl-crammd5Upgrade cyrus-saslUpgrade cyrus-sasl-crammd5-x86Upgrade cyrus-sasl-otp-32bitUpgrade cyrus-sasl-ldap-auxpropUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-otp-x86Upgrade cyrus-sasl-plain-x86Upgrade cyrus-sasl-gssapi-32bitUpgrade cyrus-sasl-digestmd5Upgrade cyrus-sasl-x86Upgrade cyrus-sasl-plain-32bitUpgrade cyrus-sasl-32bitUpgrade cyrus-sasl-sqlauxpropUpgrade cyrus-sasl-crammd5-32bitUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-saslauthdUpgrade cyrus-sasl-develUpgrade cyrus-sasl-sqlauxprop-32bitUpgrade libsasl2-3 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libsasl2-2Upgrade libsasl2 | Nov 8, 2024 | May 15, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub