In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-develUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-libUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-gssapiUpgrade cyrus-saslUpgrade cyrus-sasl-md5 | May 4, 2022 | Feb 24, 2022 |
| Alpine Linux | — | Upgrade cyrus-sasl | Mar 26, 2024 | Feb 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade cyrus-sasl-ldapUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-libUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-develUpgrade cyrus-sasl-sqlUpgrade cyrus-saslUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-gs2 | Jul 4, 2022 | Feb 24, 2022 |
| Amazon_linux | — | Upgrade cyrus-sasl | Mar 11, 2022 | Feb 22, 2022 |
| Amazon_linux_2023 | — | Upgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-plainUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-develUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-saslUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-gssapi-debuginfo | Feb 17, 2025 | Feb 22, 2022 |
| Centos_linux | — | Upgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-saslUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-libUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-sql | Feb 24, 2022 | Feb 23, 2022 |
| Debian | — | Upgrade cyrus-sasl2 | Feb 28, 2022 | Feb 24, 2022 |
| Freebsd | — | Upgrade mysql-client57Upgrade mysql-connector-c++Upgrade mysql-client80Upgrade mysql-server80Upgrade mysql-server57Upgrade mysql-connector-odbcUpgrade cyrus-sasl-sql | Nov 4, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade cyrus-saslUpgrade cyrus-sasl-lib | Jun 7, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-libUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-devel | May 25, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gssapiUpgrade cyrus-saslUpgrade cyrus-sasl-libUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-md5 | Apr 26, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cyrus-sasl-develUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-md5Upgrade cyrus-saslUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-lib | Apr 26, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cyrus-sasl-libUpgrade cyrus-sasl | Jun 16, 2022 | Feb 24, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jan 24, 2023 |
| Oracle_linux | — | Upgrade cyrus-sasl-libUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-sqlUpgrade cyrus-saslUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-gs2Upgrade cyrus-sasl-devel | Feb 24, 2022 | Feb 22, 2022 |
| Redhat_linux | — | Upgrade cyrus-sasl-plainUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-scramUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-plain-debuginfoUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-libUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-ldapUpgrade cyrus-sasl | Feb 24, 2022 | Feb 23, 2022 |
| Rocky_linux | — | Upgrade cyrus-sasl-ntlm-debuginfoUpgrade cyrus-sasl-plainUpgrade cyrus-saslUpgrade cyrus-sasl-libUpgrade cyrus-sasl-ldapUpgrade cyrus-sasl-sql-debuginfoUpgrade cyrus-sasl-gs2-debuginfoUpgrade cyrus-sasl-ldap-debuginfoUpgrade cyrus-sasl-md5Upgrade cyrus-sasl-lib-debuginfoUpgrade cyrus-sasl-gssapi-debuginfoUpgrade cyrus-sasl-develUpgrade cyrus-sasl-debugsourceUpgrade cyrus-sasl-sqlUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-scram-debuginfoUpgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-debuginfoUpgrade cyrus-sasl-md5-debuginfoUpgrade cyrus-sasl-devel-debuginfoUpgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-gs2Upgrade cyrus-sasl-plain-debuginfo | Mar 5, 2024 | Feb 24, 2022 |
| Suse | — | Upgrade cyrus-sasl-openssl1-digestmd5-x86Upgrade cyrus-sasl-openssl1-crammd5-32bitUpgrade cyrus-sasl-openssl1-gssapi-32bitUpgrade cyrus-sasl-digestmd5Upgrade cyrus-sasl-openssl1-otp-x86Upgrade cyrus-sasl-ldap-auxprop-bdbUpgrade cyrus-sasl-bdb-crammd5Upgrade cyrus-sasl-ntlmUpgrade cyrus-sasl-develUpgrade cyrus-sasl-bdb-ntlmUpgrade libsasl2-3-32bitUpgrade cyrus-sasl-crammd5-32bitUpgrade cyrus-sasl-ldap-auxpropUpgrade cyrus-sasl-openssl1Upgrade cyrus-sasl-gs2Upgrade cyrus-sasl-openssl1-digestmd5Upgrade cyrus-sasl-32bitUpgrade cyrus-sasl-scramUpgrade cyrus-sasl-bdbUpgrade cyrus-sasl-bdb-otpUpgrade cyrus-sasl-saslauthd-bdbUpgrade cyrus-sasl-openssl1-gssapiUpgrade cyrus-sasl-bdb-scramUpgrade cyrus-sasl-openssl1-x86Upgrade cyrus-sasl-openssl1-crammd5Upgrade cyrus-sasl-bdb-plainUpgrade cyrus-sasl-digestmd5-32bitUpgrade cyrus-sasl-sqlauxpropUpgrade cyrus-sasl-openssl1-crammd5-x86Upgrade nvidia-container-toolkitUpgrade cyrus-sasl-devel-32bitUpgrade cyrus-sasl-saslauthdUpgrade cyrus-sasl-bdb-gs2Upgrade cyrus-sasl-gssapiUpgrade cyrus-sasl-otpUpgrade cyrus-saslUpgrade cyrus-sasl-bdb-digestmd5Upgrade cyrus-sasl-otp-32bitUpgrade cyrus-sasl-sqlauxprop-32bitUpgrade cyrus-sasl-openssl1-digestmd5-32bitUpgrade cyrus-sasl-plain-32bitUpgrade cyrus-sasl-openssl1-otp-32bitUpgrade cyrus-sasl-plainUpgrade libsasl2-3Upgrade cyrus-sasl-sqlauxprop-bdbUpgrade cyrus-sasl-bdb-develUpgrade cyrus-sasl-crammd5Upgrade cyrus-sasl-openssl1-32bitUpgrade cyrus-sasl-gssapi-32bitUpgrade cyrus-sasl-openssl1-plain-32bitUpgrade cyrus-sasl-openssl1-ntlmUpgrade cyrus-sasl-openssl1-gssapi-x86Upgrade cyrus-sasl-ldap-auxprop-32bitUpgrade cyrus-sasl-openssl1-plain-x86Upgrade cyrus-sasl-bdb-gssapiUpgrade cyrus-sasl-openssl1-plainUpgrade cyrus-sasl-openssl1-otp | Feb 24, 2022 | Feb 22, 2022 |
| Ubuntu | — | Upgrade libsasl2-modules-sqlUpgrade libsasl2-modules-sql (Ubuntu Pro) | Feb 23, 2022 | Feb 22, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub