In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cyrus-sasl-develUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-plainUpgrade cyrus-sasl-md5Upgrade cyrus-saslUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-lib | May 4, 2022 | Feb 24, 2022 |
| Alpine Linux | — | Upgrade cyrus-sasl | Mar 26, 2024 | Feb 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-develUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-libUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-sqlUpgrade cyrus-saslUpgrade cyrus-sasl-plain | Jul 4, 2022 | Feb 24, 2022 |
| Amazon_linux | — | Upgrade cyrus-sasl | Mar 11, 2022 | Feb 22, 2022 |
| Amazon_linux_2023 | — | Upgrade cyrus-sasl-plainUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-develUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-libUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl | Feb 17, 2025 | Feb 22, 2022 |
| Centos_linux | — | Upgrade cyrus-sasl-develUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-libUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-saslUpgrade cyrus-sasl-ldap-debuginfo | Feb 24, 2022 | Feb 23, 2022 |
| Debian | — | Upgrade cyrus-sasl2 | Feb 28, 2022 | Feb 24, 2022 |
| Freebsd | — | Upgrade mysql-server80Upgrade mysql-connector-c++Upgrade mysql-client57Upgrade mysql-client80Upgrade mysql-server57Upgrade cyrus-sasl-sqlUpgrade mysql-connector-odbc | Nov 4, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cyrus-saslUpgrade cyrus-sasl-lib | Jun 7, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cyrus-saslUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-develUpgrade cyrus-sasl-libUpgrade cyrus-sasl-gssapi | May 25, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-develUpgrade cyrus-saslUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-plainUpgrade cyrus-sasl-lib | Apr 26, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-develUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ldap | Apr 26, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cyrus-sasl-libUpgrade cyrus-sasl | Jun 16, 2022 | Feb 24, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-libUpgrade cyrus-saslUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-develUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-ntlm | Feb 24, 2022 | Feb 22, 2022 |
| Redhat_linux | — | Upgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-libUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl | Feb 24, 2022 | Feb 23, 2022 |
| Rocky_linux | — | Upgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-develUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-saslUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-debuginfo | Mar 5, 2024 | Feb 24, 2022 |
| Suse | — | Upgrade cyrus-sasl-gssapi-32bitUpgrade cyrus-sasl-openssl1-ntlmUpgrade nvidia-container-toolkitUpgrade cyrus-sasl-bdb-digestmd5Upgrade cyrus-sasl-openssl1-gssapi-x86Upgrade cyrus-sasl-openssl1-32bitUpgrade cyrus-sasl-openssl1-otp-32bitUpgrade cyrus-sasl-crammd5Upgrade libsasl2-3Upgrade cyrus-sasl-openssl1-otpUpgrade cyrus-sasl-openssl1-plainUpgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-bdb-develUpgrade cyrus-sasl-otpUpgrade cyrus-sasl-sqlauxprop-bdbUpgrade cyrus-sasl-bdb-gs2Upgrade cyrus-sasl-openssl1-digestmd5-32bitUpgrade cyrus-sasl-devel-32bitUpgrade cyrus-sasl-plain-32bitUpgrade cyrus-sasl-bdb-gssapiUpgrade cyrus-sasl-openssl1-plain-32bitUpgrade cyrus-sasl-ldap-auxprop-32bitUpgrade cyrus-sasl-saslauthdUpgrade cyrus-sasl-openssl1-plain-x86Upgrade cyrus-sasl-sqlauxprop-32bitUpgrade cyrus-sasl-otp-32bitUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-bdbUpgrade cyrus-sasl-openssl1-otp-x86Upgrade cyrus-sasl-bdb-ntlmUpgrade cyrus-sasl-digestmd5-32bitUpgrade cyrus-sasl-openssl1-crammd5Upgrade cyrus-sasl-bdb-plainUpgrade cyrus-sasl-openssl1-crammd5-32bitUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-ldap-auxpropUpgrade cyrus-sasl-develUpgrade cyrus-sasl-openssl1-digestmd5Upgrade cyrus-sasl-openssl1Upgrade cyrus-sasl-gs2Upgrade cyrus-sasl-bdb-scramUpgrade cyrus-sasl-openssl1-gssapiUpgrade cyrus-sasl-saslauthd-bdbUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-openssl1-crammd5-x86Upgrade cyrus-sasl-32bitUpgrade cyrus-sasl-sqlauxpropUpgrade cyrus-sasl-crammd5-32bitUpgrade cyrus-sasl-bdb-otpUpgrade libsasl2-3-32bitUpgrade cyrus-sasl-openssl1-digestmd5-x86Upgrade cyrus-sasl-digestmd5Upgrade cyrus-sasl-openssl1-x86Upgrade cyrus-sasl-openssl1-gssapi-32bitUpgrade cyrus-sasl-ldap-auxprop-bdbUpgrade cyrus-sasl-bdb-crammd5 | Feb 24, 2022 | Feb 22, 2022 |
| Ubuntu | — | Upgrade libsasl2-modules-sqlUpgrade libsasl2-modules-sql (Ubuntu Pro) | Feb 23, 2022 | Feb 22, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub