cyrusimap cyrus sasl vulnerabilities and exploits

(subscribe to this query)

Multiple buffer overflows in Cyrus SASL library 2.1.9 and previous versions allow remote malicious users to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP auth...

Cyrusimap Cyrus Sasl Apple Mac Os X Server Apple Mac Os X

In Cyrus SASL 2.1.17 up to and including 2.1.27 prior to 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.

Cyrusimap Cyrus-sasl Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1 Oracle Communications Cloud Native Core Console 22.2.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.2.0

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook