cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cyrus-sasl-sql | May 4, 2022 | Dec 19, 2019 |
| Alpine Linux | — | Upgrade cyrus-sasl | Dec 27, 2019 | Dec 19, 2019 |
| Apple Osx Mail | — | Upgrade macOS to the latest version | Jul 16, 2020 | Dec 19, 2019 |
| Centos_linux | — | Upgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-libUpgrade cyrus-sasl-develUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-debuginfoUpgrade cyrus-saslUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-plain | Nov 5, 2020 | Dec 19, 2019 |
| Debian | — | Upgrade cyrus-sasl2 | Dec 23, 2019 | Dec 19, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade cyrus-sasl | Nov 4, 2022 | Feb 28, 2022 |
| Huawei Euleros 2_0_sp2 | — | Upgrade cyrus-sasl-md5Upgrade cyrus-saslUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-libUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-devel | Jun 17, 2020 | Dec 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-libUpgrade cyrus-sasl-develUpgrade cyrus-sasl-scram | Apr 16, 2020 | Dec 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cyrus-sasl-gssapiUpgrade cyrus-saslUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-develUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5 | Nov 2, 2020 | Dec 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-develUpgrade cyrus-saslUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5 | Feb 26, 2020 | Dec 19, 2019 |
| Oracle_linux | — | Upgrade cyrus-sasl-develUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-libUpgrade cyrus-sasl-ldapUpgrade cyrus-saslUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-plain | Nov 17, 2020 | Nov 28, 2019 |
| Redhat_linux | — | Upgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-saslUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-libUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-develNo solution existsUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-debugsource | Nov 5, 2020 | Dec 19, 2019 |
| Rocky_linux | — | Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl | Mar 12, 2024 | Dec 19, 2019 |
| Suse | — | Upgrade cyrus-sasl-crammd5Upgrade cyrus-sasl-openssl1-crammd5-x86Upgrade cyrus-sasl-openssl1-plainUpgrade cyrus-sasl-sqlauxprop-32bitUpgrade cyrus-sasl-digestmd5-32bitUpgrade cyrus-sasl-otp-32bitUpgrade cyrus-sasl-openssl1-digestmd5Upgrade cyrus-sasl-bdb-develUpgrade cyrus-sasl-openssl1-gssapi-32bitUpgrade cyrus-sasl-openssl1-digestmd5-32bitUpgrade libsasl2-3-32bitUpgrade cyrus-sasl-openssl1-32bitUpgrade libsasl2-3Upgrade cyrus-sasl-bdb-plainUpgrade cyrus-sasl-otpUpgrade cyrus-sasl-openssl1-gssapi-x86Upgrade cyrus-sasl-bdb-ntlmUpgrade cyrus-sasl-openssl1-otpUpgrade cyrus-sasl-openssl1-digestmd5-x86Upgrade cyrus-sasl-bdb-digestmd5Upgrade cyrus-sasl-sqlauxprop-bdbUpgrade cyrus-sasl-openssl1Upgrade cyrus-sasl-32bitUpgrade cyrus-sasl-openssl1-crammd5-32bitUpgrade cyrus-sasl-openssl1-x86Upgrade cyrus-sasl-openssl1-ntlmUpgrade cyrus-sasl-bdbUpgrade cyrus-sasl-saslauthdUpgrade cyrus-sasl-openssl1-plain-32bitUpgrade cyrus-sasl-bdb-gs2Upgrade cyrus-sasl-sqlauxpropUpgrade cyrus-sasl-digestmd5Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-plain-32bitUpgrade cyrus-sasl-openssl1-plain-x86Upgrade cyrus-sasl-bdb-otpUpgrade cyrus-sasl-gssapi-32bitUpgrade cyrus-sasl-openssl1-otp-32bitUpgrade cyrus-sasl-bdb-gssapiUpgrade cyrus-saslUpgrade cyrus-sasl-openssl1-crammd5Upgrade cyrus-sasl-openssl1-gssapiUpgrade cyrus-sasl-saslauthd-bdbUpgrade cyrus-sasl-openssl1-otp-x86Upgrade cyrus-sasl-crammd5-32bitUpgrade cyrus-sasl-bdb-scramUpgrade cyrus-sasl-develUpgrade cyrus-sasl-plain | Dec 18, 2020 | Dec 19, 2019 |
| Ubuntu | — | Upgrade libsasl2-2Upgrade libsasl2-2 (Ubuntu Pro) | Jan 29, 2020 | Dec 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub