In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cyrus-saslUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-plainUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-libUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-develUpgrade cyrus-sasl-scram | May 4, 2022 | Feb 24, 2022 |
| Alpine Linux | — | Upgrade cyrus-sasl | Mar 26, 2024 | Feb 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-md5Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-libUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-develUpgrade cyrus-sasl-ntlm | Jul 4, 2022 | Feb 24, 2022 |
| Amazon_linux | — | Upgrade cyrus-sasl | Mar 11, 2022 | Feb 22, 2022 |
| Amazon_linux_2023 | — | Upgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-plainUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-saslUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-libUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-md5-debuginfo | Feb 17, 2025 | Feb 22, 2022 |
| Centos_linux | — | Upgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-libUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-saslUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-sql-debuginfo | Feb 24, 2022 | Feb 23, 2022 |
| Debian | — | Upgrade cyrus-sasl2 | Feb 28, 2022 | Feb 24, 2022 |
| Freebsd | — | Upgrade cyrus-sasl-sqlUpgrade mysql-connector-odbcUpgrade mysql-client80Upgrade mysql-server57Upgrade mysql-server80Upgrade mysql-client57Upgrade mysql-connector-c++ | Nov 4, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cyrus-saslUpgrade cyrus-sasl-lib | Jun 7, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cyrus-sasl-md5Upgrade cyrus-sasl-libUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-plainUpgrade cyrus-sasl | May 25, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cyrus-saslUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-libUpgrade cyrus-sasl-develUpgrade cyrus-sasl-scram | Apr 26, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cyrus-saslUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-libUpgrade cyrus-sasl-develUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ldap | Apr 26, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cyrus-saslUpgrade cyrus-sasl-lib | Jun 16, 2022 | Feb 24, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade cyrus-sasl-sqlUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-libUpgrade cyrus-saslUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-ldapUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gs2 | Feb 24, 2022 | Feb 22, 2022 |
| Redhat_linux | — | Upgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-libUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-md5Upgrade cyrus-sasl | Feb 24, 2022 | Feb 23, 2022 |
| Rocky_linux | — | Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-libUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl | Mar 5, 2024 | Feb 24, 2022 |
| Suse | — | Upgrade cyrus-sasl-openssl1-gssapi-x86Upgrade cyrus-sasl-openssl1-ntlmUpgrade cyrus-sasl-openssl1-plainUpgrade cyrus-sasl-devel-32bitUpgrade cyrus-sasl-otpUpgrade cyrus-sasl-gssapi-32bitUpgrade cyrus-sasl-openssl1-plain-32bitUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-ldap-auxprop-32bitUpgrade cyrus-sasl-saslauthdUpgrade cyrus-sasl-openssl1-plain-x86Upgrade cyrus-sasl-plain-32bitUpgrade cyrus-sasl-openssl1-otp-32bitUpgrade cyrus-sasl-openssl1-32bitUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-otp-32bitUpgrade cyrus-sasl-sqlauxprop-32bitUpgrade cyrus-sasl-bdb-develUpgrade libsasl2-3Upgrade cyrus-sasl-sqlauxprop-bdbUpgrade cyrus-sasl-crammd5Upgrade cyrus-saslUpgrade cyrus-sasl-bdb-gssapiUpgrade cyrus-sasl-openssl1-otpUpgrade nvidia-container-toolkitUpgrade cyrus-sasl-bdb-digestmd5Upgrade cyrus-sasl-openssl1-digestmd5-32bitUpgrade cyrus-sasl-bdb-gs2Upgrade cyrus-sasl-sqlauxpropUpgrade cyrus-sasl-openssl1-digestmd5Upgrade cyrus-sasl-openssl1-otp-x86Upgrade libsasl2-3-32bitUpgrade cyrus-sasl-digestmd5Upgrade cyrus-sasl-openssl1-gssapi-32bitUpgrade cyrus-sasl-ldap-auxprop-bdbUpgrade cyrus-sasl-openssl1-crammd5Upgrade cyrus-sasl-bdb-scramUpgrade cyrus-sasl-digestmd5-32bitUpgrade cyrus-sasl-bdb-plainUpgrade cyrus-sasl-32bitUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-bdb-crammd5Upgrade cyrus-sasl-openssl1-x86Upgrade cyrus-sasl-openssl1-gssapiUpgrade cyrus-sasl-saslauthd-bdbUpgrade cyrus-sasl-bdbUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-openssl1-digestmd5-x86Upgrade cyrus-sasl-gs2Upgrade cyrus-sasl-openssl1Upgrade cyrus-sasl-ldap-auxpropUpgrade cyrus-sasl-develUpgrade cyrus-sasl-bdb-otpUpgrade cyrus-sasl-openssl1-crammd5-x86Upgrade cyrus-sasl-openssl1-crammd5-32bitUpgrade cyrus-sasl-bdb-ntlmUpgrade cyrus-sasl-crammd5-32bit | Feb 24, 2022 | Feb 22, 2022 |
| Ubuntu | — | Upgrade libsasl2-modules-sql (Ubuntu Pro)Upgrade libsasl2-modules-sql | Feb 23, 2022 | Feb 22, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub