In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-libUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-md5Upgrade cyrus-saslUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ldapUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-develUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-scram | May 4, 2022 | Feb 24, 2022 |
| Alpine Linux | — | Upgrade cyrus-sasl | Mar 26, 2024 | Feb 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade cyrus-sasl-develUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-libUpgrade cyrus-sasl-sqlUpgrade cyrus-saslUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-plain | Jul 4, 2022 | Feb 24, 2022 |
| Amazon_linux | — | Upgrade cyrus-sasl | Mar 11, 2022 | Feb 22, 2022 |
| Amazon_linux_2023 | — | Upgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-plainUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-develUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-saslUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5-debuginfo | Feb 17, 2025 | Feb 22, 2022 |
| Centos_linux | — | Upgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-libUpgrade cyrus-sasl-develUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-sql | Feb 24, 2022 | Feb 23, 2022 |
| Debian | — | Upgrade cyrus-sasl2 | Feb 28, 2022 | Feb 24, 2022 |
| Freebsd | — | Upgrade mysql-connector-odbcUpgrade cyrus-sasl-sqlUpgrade mysql-client57Upgrade mysql-server80Upgrade mysql-connector-c++Upgrade mysql-server57Upgrade mysql-client80 | Nov 4, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cyrus-saslUpgrade cyrus-sasl-lib | Jun 7, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cyrus-saslUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-lib | May 25, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cyrus-sasl-libUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-devel | Apr 26, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cyrus-sasl-develUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-libUpgrade cyrus-saslUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-md5 | Apr 26, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cyrus-saslUpgrade cyrus-sasl-lib | Jun 16, 2022 | Feb 24, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade cyrus-sasl-md5Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-sqlUpgrade cyrus-saslUpgrade cyrus-sasl-libUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-plain | Feb 24, 2022 | Feb 22, 2022 |
| Redhat_linux | — | Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-ldapUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-saslUpgrade cyrus-sasl-lib | Feb 24, 2022 | Feb 23, 2022 |
| Rocky_linux | — | Upgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-libUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-gs2 | Mar 5, 2024 | Feb 24, 2022 |
| Suse | — | Upgrade cyrus-sasl-develUpgrade cyrus-sasl-digestmd5Upgrade cyrus-sasl-openssl1-digestmd5Upgrade cyrus-sasl-gs2Upgrade cyrus-sasl-openssl1-crammd5-32bitUpgrade cyrus-sasl-sqlauxpropUpgrade cyrus-sasl-digestmd5-32bitUpgrade cyrus-sasl-bdb-scramUpgrade cyrus-sasl-openssl1-gssapi-32bitUpgrade cyrus-sasl-openssl1-x86Upgrade cyrus-sasl-ldap-auxprop-bdbUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-openssl1-otp-x86Upgrade libsasl2-3-32bitUpgrade cyrus-sasl-crammd5-32bitUpgrade cyrus-sasl-bdb-crammd5Upgrade cyrus-sasl-openssl1-gssapiUpgrade cyrus-sasl-ldap-auxpropUpgrade cyrus-sasl-openssl1-digestmd5-x86Upgrade cyrus-sasl-openssl1Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-bdbUpgrade cyrus-sasl-saslauthd-bdbUpgrade cyrus-sasl-bdb-ntlmUpgrade cyrus-sasl-bdb-plainUpgrade cyrus-sasl-openssl1-crammd5Upgrade cyrus-sasl-openssl1-crammd5-x86Upgrade cyrus-sasl-bdb-otpUpgrade cyrus-sasl-32bitUpgrade cyrus-sasl-saslauthdUpgrade cyrus-sasl-sqlauxprop-32bitUpgrade cyrus-sasl-plainUpgrade libsasl2-3Upgrade nvidia-container-toolkitUpgrade cyrus-sasl-crammd5Upgrade cyrus-sasl-bdb-gs2Upgrade cyrus-sasl-openssl1-32bitUpgrade cyrus-saslUpgrade cyrus-sasl-bdb-develUpgrade cyrus-sasl-plain-32bitUpgrade cyrus-sasl-openssl1-otp-32bitUpgrade cyrus-sasl-openssl1-ntlmUpgrade cyrus-sasl-openssl1-plain-32bitUpgrade cyrus-sasl-openssl1-otpUpgrade cyrus-sasl-devel-32bitUpgrade cyrus-sasl-openssl1-plainUpgrade cyrus-sasl-openssl1-digestmd5-32bitUpgrade cyrus-sasl-otpUpgrade cyrus-sasl-gssapi-32bitUpgrade cyrus-sasl-bdb-gssapiUpgrade cyrus-sasl-openssl1-plain-x86Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-ldap-auxprop-32bitUpgrade cyrus-sasl-openssl1-gssapi-x86Upgrade cyrus-sasl-otp-32bitUpgrade cyrus-sasl-bdb-digestmd5Upgrade cyrus-sasl-sqlauxprop-bdb | Feb 24, 2022 | Feb 22, 2022 |
| Ubuntu | — | Upgrade libsasl2-modules-sqlUpgrade libsasl2-modules-sql (Ubuntu Pro) | Feb 23, 2022 | Feb 22, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub