cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cyrus-sasl-sql | May 4, 2022 | Dec 19, 2019 |
| Alpine Linux | — | Upgrade cyrus-sasl | Dec 27, 2019 | Dec 19, 2019 |
| Apple Osx Mail | — | Upgrade macOS to the latest version | Jul 16, 2020 | Dec 19, 2019 |
| Centos_linux | — | Upgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-saslUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-lib | Nov 5, 2020 | Dec 19, 2019 |
| Debian | — | Upgrade cyrus-sasl2 | Dec 23, 2019 | Dec 19, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade cyrus-sasl | Nov 4, 2022 | Feb 28, 2022 |
| Huawei Euleros 2_0_sp2 | — | Upgrade cyrus-sasl-libUpgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-develUpgrade cyrus-sasl-scram | Jun 17, 2020 | Dec 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cyrus-sasl-develUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-plainUpgrade cyrus-sasl | Apr 16, 2020 | Dec 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-develUpgrade cyrus-sasl-libUpgrade cyrus-sasl-scram | Nov 2, 2020 | Dec 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cyrus-sasl-libUpgrade cyrus-saslUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-plainUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-develUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ntlm | Feb 26, 2020 | Dec 19, 2019 |
| Oracle_linux | — | Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-develUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-ldapUpgrade cyrus-saslUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-gs2 | Nov 17, 2020 | Nov 28, 2019 |
| Redhat_linux | — | Upgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-libUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-saslUpgrade cyrus-sasl-md5-debuginfoNo solution existsUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-scram | Nov 5, 2020 | Dec 19, 2019 |
| Rocky_linux | — | Upgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-saslUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-libUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-debuginfo | Mar 12, 2024 | Dec 19, 2019 |
| Suse | — | Upgrade cyrus-sasl-openssl1-gssapi-x86Upgrade cyrus-sasl-sqlauxprop-32bitUpgrade cyrus-sasl-digestmd5-32bitUpgrade cyrus-sasl-openssl1-32bitUpgrade cyrus-sasl-bdb-plainUpgrade cyrus-sasl-openssl1-digestmd5Upgrade cyrus-sasl-openssl1-digestmd5-32bitUpgrade cyrus-sasl-otpUpgrade cyrus-sasl-otp-32bitUpgrade cyrus-sasl-openssl1-gssapi-32bitUpgrade libsasl2-3Upgrade cyrus-sasl-bdb-ntlmUpgrade libsasl2-3-32bitUpgrade cyrus-sasl-bdb-develUpgrade cyrus-sasl-crammd5Upgrade cyrus-sasl-openssl1-crammd5-x86Upgrade cyrus-sasl-openssl1-plainUpgrade cyrus-sasl-sqlauxprop-bdbUpgrade cyrus-sasl-openssl1-crammd5-32bitUpgrade cyrus-sasl-digestmd5Upgrade cyrus-sasl-openssl1-ntlmUpgrade cyrus-sasl-openssl1-plain-x86Upgrade cyrus-sasl-32bitUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-openssl1Upgrade cyrus-sasl-bdb-digestmd5Upgrade cyrus-sasl-plainUpgrade cyrus-sasl-saslauthd-bdbUpgrade cyrus-sasl-saslauthdUpgrade cyrus-sasl-openssl1-plain-32bitUpgrade cyrus-sasl-openssl1-otpUpgrade cyrus-sasl-develUpgrade cyrus-sasl-openssl1-otp-x86Upgrade cyrus-sasl-openssl1-gssapiUpgrade cyrus-sasl-bdb-gs2Upgrade cyrus-sasl-plain-32bitUpgrade cyrus-sasl-sqlauxpropUpgrade cyrus-sasl-openssl1-x86Upgrade cyrus-sasl-bdb-otpUpgrade cyrus-sasl-bdbUpgrade cyrus-sasl-bdb-scramUpgrade cyrus-sasl-openssl1-crammd5Upgrade cyrus-sasl-crammd5-32bitUpgrade cyrus-saslUpgrade cyrus-sasl-bdb-gssapiUpgrade cyrus-sasl-openssl1-otp-32bitUpgrade cyrus-sasl-gssapi-32bitUpgrade cyrus-sasl-openssl1-digestmd5-x86 | Dec 18, 2020 | Dec 19, 2019 |
| Ubuntu | — | Upgrade libsasl2-2 (Ubuntu Pro)Upgrade libsasl2-2 | Jan 29, 2020 | Dec 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub