cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cyrus-sasl-sql | May 4, 2022 | Dec 19, 2019 |
| Alpine Linux | — | Upgrade cyrus-sasl | Dec 27, 2019 | Dec 19, 2019 |
| Apple Osx Mail | — | Upgrade macOS to the latest version | Jul 16, 2020 | Dec 19, 2019 |
| Centos_linux | — | Upgrade cyrus-saslUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-sqlUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-libUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-debugsource | Nov 5, 2020 | Dec 19, 2019 |
| Debian | — | Upgrade cyrus-sasl2 | Dec 23, 2019 | Dec 19, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade cyrus-sasl | Nov 4, 2022 | Feb 28, 2022 |
| Huawei Euleros 2_0_sp2 | — | Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-develUpgrade cyrus-sasl-libUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-md5Upgrade cyrus-sasl | Jun 17, 2020 | Dec 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-libUpgrade cyrus-sasl-develUpgrade cyrus-sasl-scram | Apr 16, 2020 | Dec 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-develUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-libUpgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-gssapi | Nov 2, 2020 | Dec 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ldapUpgrade cyrus-sasl-develUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5Upgrade cyrus-saslUpgrade cyrus-sasl-gssapi | Feb 26, 2020 | Dec 19, 2019 |
| Oracle_linux | — | Upgrade cyrus-saslUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ldapUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-develUpgrade cyrus-sasl-lib | Nov 17, 2020 | Nov 28, 2019 |
| Redhat_linux | — | Upgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-develUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-ntlmNo solution existsUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-libUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-saslUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-gssapi-debuginfo | Nov 5, 2020 | Dec 19, 2019 |
| Rocky_linux | — | Upgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-libUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-saslUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-gs2 | Mar 12, 2024 | Dec 19, 2019 |
| Suse | — | Upgrade cyrus-saslUpgrade cyrus-sasl-saslauthd-bdbUpgrade cyrus-sasl-saslauthdUpgrade cyrus-sasl-bdb-otpUpgrade cyrus-sasl-openssl1-ntlmUpgrade cyrus-sasl-bdbUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-openssl1-digestmd5-x86Upgrade cyrus-sasl-openssl1-otp-x86Upgrade cyrus-sasl-openssl1-plain-32bitUpgrade cyrus-sasl-bdb-digestmd5Upgrade cyrus-sasl-openssl1-gssapiUpgrade cyrus-sasl-sqlauxprop-bdbUpgrade cyrus-sasl-bdb-gs2Upgrade cyrus-sasl-32bitUpgrade cyrus-sasl-openssl1-otp-32bitUpgrade cyrus-sasl-openssl1Upgrade cyrus-sasl-openssl1-otpUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-digestmd5Upgrade cyrus-sasl-plain-32bitUpgrade cyrus-sasl-openssl1-crammd5Upgrade cyrus-sasl-bdb-scramUpgrade cyrus-sasl-sqlauxpropUpgrade cyrus-sasl-gssapi-32bitUpgrade cyrus-sasl-develUpgrade cyrus-sasl-openssl1-plain-x86Upgrade cyrus-sasl-openssl1-crammd5-32bitUpgrade cyrus-sasl-openssl1-x86Upgrade cyrus-sasl-crammd5-32bitUpgrade cyrus-sasl-bdb-gssapiUpgrade libsasl2-3-32bitUpgrade cyrus-sasl-openssl1-digestmd5-32bitUpgrade cyrus-sasl-openssl1-32bitUpgrade cyrus-sasl-sqlauxprop-32bitUpgrade cyrus-sasl-crammd5Upgrade cyrus-sasl-bdb-develUpgrade cyrus-sasl-openssl1-gssapi-32bitUpgrade cyrus-sasl-openssl1-gssapi-x86Upgrade libsasl2-3Upgrade cyrus-sasl-bdb-ntlmUpgrade cyrus-sasl-openssl1-digestmd5Upgrade cyrus-sasl-bdb-plainUpgrade cyrus-sasl-otp-32bitUpgrade cyrus-sasl-otpUpgrade cyrus-sasl-digestmd5-32bitUpgrade cyrus-sasl-openssl1-crammd5-x86Upgrade cyrus-sasl-openssl1-plain | Dec 18, 2020 | Dec 19, 2019 |
| Ubuntu | — | Upgrade libsasl2-2 (Ubuntu Pro)Upgrade libsasl2-2 | Jan 29, 2020 | Dec 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub