In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-cyrus-saslalma-upgrade-cyrus-sasl-develalma-upgrade-cyrus-sasl-gs2alma-upgrade-cyrus-sasl-gssapialma-upgrade-cyrus-sasl-ldapalma-upgrade-cyrus-sasl-libalma-upgrade-cyrus-sasl-md5alma-upgrade-cyrus-sasl-ntlmalma-upgrade-cyrus-sasl-plainalma-upgrade-cyrus-sasl-scramalma-upgrade-cyrus-sasl-sql | May 4, 2022 | Feb 24, 2022 | |
| Alpine Linux | alpine-linux-upgrade-cyrus-sasl | Mar 26, 2024 | Feb 23, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-cyrus-saslamazon-linux-ami-2-upgrade-cyrus-sasl-debuginfoamazon-linux-ami-2-upgrade-cyrus-sasl-develamazon-linux-ami-2-upgrade-cyrus-sasl-gs2amazon-linux-ami-2-upgrade-cyrus-sasl-gssapiamazon-linux-ami-2-upgrade-cyrus-sasl-ldapamazon-linux-ami-2-upgrade-cyrus-sasl-libamazon-linux-ami-2-upgrade-cyrus-sasl-md5amazon-linux-ami-2-upgrade-cyrus-sasl-ntlmamazon-linux-ami-2-upgrade-cyrus-sasl-plainamazon-linux-ami-2-upgrade-cyrus-sasl-scramamazon-linux-ami-2-upgrade-cyrus-sasl-sql | Jul 4, 2022 | Feb 24, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-cyrus-sasl | Mar 11, 2022 | Feb 22, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-cyrus-saslamazon-linux-2023-upgrade-cyrus-sasl-debuginfoamazon-linux-2023-upgrade-cyrus-sasl-debugsourceamazon-linux-2023-upgrade-cyrus-sasl-develamazon-linux-2023-upgrade-cyrus-sasl-devel-debuginfoamazon-linux-2023-upgrade-cyrus-sasl-gs2amazon-linux-2023-upgrade-cyrus-sasl-gs2-debuginfoamazon-linux-2023-upgrade-cyrus-sasl-gssapiamazon-linux-2023-upgrade-cyrus-sasl-gssapi-debuginfoamazon-linux-2023-upgrade-cyrus-sasl-ldapamazon-linux-2023-upgrade-cyrus-sasl-ldap-debuginfoamazon-linux-2023-upgrade-cyrus-sasl-libamazon-linux-2023-upgrade-cyrus-sasl-lib-debuginfoamazon-linux-2023-upgrade-cyrus-sasl-md5amazon-linux-2023-upgrade-cyrus-sasl-md5-debuginfoamazon-linux-2023-upgrade-cyrus-sasl-ntlmamazon-linux-2023-upgrade-cyrus-sasl-ntlm-debuginfoamazon-linux-2023-upgrade-cyrus-sasl-plainamazon-linux-2023-upgrade-cyrus-sasl-plain-debuginfoamazon-linux-2023-upgrade-cyrus-sasl-scramamazon-linux-2023-upgrade-cyrus-sasl-scram-debuginfoamazon-linux-2023-upgrade-cyrus-sasl-sqlamazon-linux-2023-upgrade-cyrus-sasl-sql-debuginfo | Feb 17, 2025 | Feb 22, 2022 | |
| Centos_linux | — | centos-upgrade-cyrus-saslcentos-upgrade-cyrus-sasl-debuginfocentos-upgrade-cyrus-sasl-debugsourcecentos-upgrade-cyrus-sasl-develcentos-upgrade-cyrus-sasl-devel-debuginfocentos-upgrade-cyrus-sasl-gs2centos-upgrade-cyrus-sasl-gs2-debuginfocentos-upgrade-cyrus-sasl-gssapicentos-upgrade-cyrus-sasl-gssapi-debuginfocentos-upgrade-cyrus-sasl-ldapcentos-upgrade-cyrus-sasl-ldap-debuginfocentos-upgrade-cyrus-sasl-libcentos-upgrade-cyrus-sasl-lib-debuginfocentos-upgrade-cyrus-sasl-md5centos-upgrade-cyrus-sasl-md5-debuginfocentos-upgrade-cyrus-sasl-ntlmcentos-upgrade-cyrus-sasl-ntlm-debuginfocentos-upgrade-cyrus-sasl-plaincentos-upgrade-cyrus-sasl-plain-debuginfocentos-upgrade-cyrus-sasl-scramcentos-upgrade-cyrus-sasl-scram-debuginfocentos-upgrade-cyrus-sasl-sqlcentos-upgrade-cyrus-sasl-sql-debuginfo | Feb 24, 2022 | Feb 23, 2022 |
| Debian | debian-upgrade-cyrus-sasl2 | Feb 28, 2022 | Feb 24, 2022 | |
| Freebsd | freebsd-upgrade-package-cyrus-sasl-sqlfreebsd-upgrade-package-mysql-connector-c++freebsd-upgrade-package-mysql-connector-odbcfreebsd-upgrade-package-mysql-client57freebsd-upgrade-package-mysql-server57freebsd-upgrade-package-mysql-client80freebsd-upgrade-package-mysql-server80 | Nov 4, 2022 | Feb 23, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-cyrus-saslhuawei-euleros-2_0_sp10-upgrade-cyrus-sasl-lib | Jun 7, 2022 | Feb 24, 2022 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-cyrus-saslhuawei-euleros-2_0_sp3-upgrade-cyrus-sasl-develhuawei-euleros-2_0_sp3-upgrade-cyrus-sasl-gssapihuawei-euleros-2_0_sp3-upgrade-cyrus-sasl-libhuawei-euleros-2_0_sp3-upgrade-cyrus-sasl-md5huawei-euleros-2_0_sp3-upgrade-cyrus-sasl-plainhuawei-euleros-2_0_sp3-upgrade-cyrus-sasl-scram | May 25, 2022 | Feb 24, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-cyrus-saslhuawei-euleros-2_0_sp5-upgrade-cyrus-sasl-develhuawei-euleros-2_0_sp5-upgrade-cyrus-sasl-gssapihuawei-euleros-2_0_sp5-upgrade-cyrus-sasl-libhuawei-euleros-2_0_sp5-upgrade-cyrus-sasl-md5huawei-euleros-2_0_sp5-upgrade-cyrus-sasl-plainhuawei-euleros-2_0_sp5-upgrade-cyrus-sasl-scram | Apr 26, 2022 | Feb 24, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-cyrus-saslhuawei-euleros-2_0_sp8-upgrade-cyrus-sasl-develhuawei-euleros-2_0_sp8-upgrade-cyrus-sasl-gs2huawei-euleros-2_0_sp8-upgrade-cyrus-sasl-gssapihuawei-euleros-2_0_sp8-upgrade-cyrus-sasl-ldaphuawei-euleros-2_0_sp8-upgrade-cyrus-sasl-libhuawei-euleros-2_0_sp8-upgrade-cyrus-sasl-md5huawei-euleros-2_0_sp8-upgrade-cyrus-sasl-ntlmhuawei-euleros-2_0_sp8-upgrade-cyrus-sasl-plainhuawei-euleros-2_0_sp8-upgrade-cyrus-sasl-scram | Apr 26, 2022 | Feb 24, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-cyrus-saslhuawei-euleros-2_0_sp9-upgrade-cyrus-sasl-lib | Jun 16, 2022 | Feb 24, 2022 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Jan 24, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-cyrus-sasloracle-linux-upgrade-cyrus-sasl-develoracle-linux-upgrade-cyrus-sasl-gs2oracle-linux-upgrade-cyrus-sasl-gssapioracle-linux-upgrade-cyrus-sasl-ldaporacle-linux-upgrade-cyrus-sasl-liboracle-linux-upgrade-cyrus-sasl-md5oracle-linux-upgrade-cyrus-sasl-ntlmoracle-linux-upgrade-cyrus-sasl-plainoracle-linux-upgrade-cyrus-sasl-scramoracle-linux-upgrade-cyrus-sasl-sql | Feb 24, 2022 | Feb 22, 2022 |
| Redhat_linux | redhat-upgrade-cyrus-saslredhat-upgrade-cyrus-sasl-debuginforedhat-upgrade-cyrus-sasl-debugsourceredhat-upgrade-cyrus-sasl-develredhat-upgrade-cyrus-sasl-devel-debuginforedhat-upgrade-cyrus-sasl-gs2redhat-upgrade-cyrus-sasl-gs2-debuginforedhat-upgrade-cyrus-sasl-gssapiredhat-upgrade-cyrus-sasl-gssapi-debuginforedhat-upgrade-cyrus-sasl-ldapredhat-upgrade-cyrus-sasl-ldap-debuginforedhat-upgrade-cyrus-sasl-libredhat-upgrade-cyrus-sasl-lib-debuginforedhat-upgrade-cyrus-sasl-md5redhat-upgrade-cyrus-sasl-md5-debuginforedhat-upgrade-cyrus-sasl-ntlmredhat-upgrade-cyrus-sasl-ntlm-debuginforedhat-upgrade-cyrus-sasl-plainredhat-upgrade-cyrus-sasl-plain-debuginforedhat-upgrade-cyrus-sasl-scramredhat-upgrade-cyrus-sasl-scram-debuginforedhat-upgrade-cyrus-sasl-sqlredhat-upgrade-cyrus-sasl-sql-debuginfo | Feb 24, 2022 | Feb 23, 2022 | |
| Rocky_linux | rocky-upgrade-cyrus-saslrocky-upgrade-cyrus-sasl-debuginforocky-upgrade-cyrus-sasl-debugsourcerocky-upgrade-cyrus-sasl-develrocky-upgrade-cyrus-sasl-devel-debuginforocky-upgrade-cyrus-sasl-gs2rocky-upgrade-cyrus-sasl-gs2-debuginforocky-upgrade-cyrus-sasl-gssapirocky-upgrade-cyrus-sasl-gssapi-debuginforocky-upgrade-cyrus-sasl-ldaprocky-upgrade-cyrus-sasl-ldap-debuginforocky-upgrade-cyrus-sasl-librocky-upgrade-cyrus-sasl-lib-debuginforocky-upgrade-cyrus-sasl-md5rocky-upgrade-cyrus-sasl-md5-debuginforocky-upgrade-cyrus-sasl-ntlmrocky-upgrade-cyrus-sasl-ntlm-debuginforocky-upgrade-cyrus-sasl-plainrocky-upgrade-cyrus-sasl-plain-debuginforocky-upgrade-cyrus-sasl-scramrocky-upgrade-cyrus-sasl-scram-debuginforocky-upgrade-cyrus-sasl-sqlrocky-upgrade-cyrus-sasl-sql-debuginfo | Mar 5, 2024 | Feb 24, 2022 | |
| Suse | — | suse-upgrade-cyrus-saslsuse-upgrade-cyrus-sasl-32bitsuse-upgrade-cyrus-sasl-bdbsuse-upgrade-cyrus-sasl-bdb-crammd5suse-upgrade-cyrus-sasl-bdb-develsuse-upgrade-cyrus-sasl-bdb-digestmd5suse-upgrade-cyrus-sasl-bdb-gs2suse-upgrade-cyrus-sasl-bdb-gssapisuse-upgrade-cyrus-sasl-bdb-ntlmsuse-upgrade-cyrus-sasl-bdb-otpsuse-upgrade-cyrus-sasl-bdb-plainsuse-upgrade-cyrus-sasl-bdb-scramsuse-upgrade-cyrus-sasl-crammd5suse-upgrade-cyrus-sasl-crammd5-32bitsuse-upgrade-cyrus-sasl-develsuse-upgrade-cyrus-sasl-devel-32bitsuse-upgrade-cyrus-sasl-digestmd5suse-upgrade-cyrus-sasl-digestmd5-32bitsuse-upgrade-cyrus-sasl-gs2suse-upgrade-cyrus-sasl-gssapisuse-upgrade-cyrus-sasl-gssapi-32bitsuse-upgrade-cyrus-sasl-ldap-auxpropsuse-upgrade-cyrus-sasl-ldap-auxprop-32bitsuse-upgrade-cyrus-sasl-ldap-auxprop-bdbsuse-upgrade-cyrus-sasl-ntlmsuse-upgrade-cyrus-sasl-openssl1suse-upgrade-cyrus-sasl-openssl1-32bitsuse-upgrade-cyrus-sasl-openssl1-crammd5suse-upgrade-cyrus-sasl-openssl1-crammd5-32bitsuse-upgrade-cyrus-sasl-openssl1-crammd5-x86suse-upgrade-cyrus-sasl-openssl1-digestmd5suse-upgrade-cyrus-sasl-openssl1-digestmd5-32bitsuse-upgrade-cyrus-sasl-openssl1-digestmd5-x86suse-upgrade-cyrus-sasl-openssl1-gssapisuse-upgrade-cyrus-sasl-openssl1-gssapi-32bitsuse-upgrade-cyrus-sasl-openssl1-gssapi-x86suse-upgrade-cyrus-sasl-openssl1-ntlmsuse-upgrade-cyrus-sasl-openssl1-otpsuse-upgrade-cyrus-sasl-openssl1-otp-32bitsuse-upgrade-cyrus-sasl-openssl1-otp-x86suse-upgrade-cyrus-sasl-openssl1-plainsuse-upgrade-cyrus-sasl-openssl1-plain-32bitsuse-upgrade-cyrus-sasl-openssl1-plain-x86suse-upgrade-cyrus-sasl-openssl1-x86suse-upgrade-cyrus-sasl-otpsuse-upgrade-cyrus-sasl-otp-32bitsuse-upgrade-cyrus-sasl-plainsuse-upgrade-cyrus-sasl-plain-32bitsuse-upgrade-cyrus-sasl-saslauthdsuse-upgrade-cyrus-sasl-saslauthd-bdbsuse-upgrade-cyrus-sasl-scramsuse-upgrade-cyrus-sasl-sqlauxpropsuse-upgrade-cyrus-sasl-sqlauxprop-32bitsuse-upgrade-cyrus-sasl-sqlauxprop-bdbsuse-upgrade-libsasl2-3suse-upgrade-libsasl2-3-32bitsuse-upgrade-nvidia-container-toolkit | Feb 24, 2022 | Feb 22, 2022 |
| Ubuntu | ubuntu-pro-upgrade-libsasl2-modules-sqlubuntu-upgrade-libsasl2-modules-sql | Feb 23, 2022 | Feb 22, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub