CVE-2018-6521

2018-02-0201:29:00

Debian Security Bug Tracker

security-tracker.debian.org

0.012 Low

EPSS

Percentile

84.8%

JSON

The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might be a scenario in which this allows remote attackers to bypass intended access restrictions.

OSVersionArchitecturePackageVersionFilename
Debian12allsimplesamlphp< 1.15.2-1simplesamlphp_1.15.2-1_all.deb
Debian11allsimplesamlphp< 1.15.2-1simplesamlphp_1.15.2-1_all.deb
Debian10allsimplesamlphp< 1.15.2-1simplesamlphp_1.15.2-1_all.deb
Debian999allsimplesamlphp< 1.15.2-1simplesamlphp_1.15.2-1_all.deb
Debian13allsimplesamlphp< 1.15.2-1simplesamlphp_1.15.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	simplesamlphp	< 1.15.2-1	simplesamlphp_1.15.2-1_all.deb
Debian	11	all	simplesamlphp	< 1.15.2-1	simplesamlphp_1.15.2-1_all.deb
Debian	10	all	simplesamlphp	< 1.15.2-1	simplesamlphp_1.15.2-1_all.deb
Debian	999	all	simplesamlphp	< 1.15.2-1	simplesamlphp_1.15.2-1_all.deb
Debian	13	all	simplesamlphp	< 1.15.2-1	simplesamlphp_1.15.2-1_all.deb

0.012 Low

EPSS

Percentile

84.8%

JSON

Related for DEBIANCVE:CVE-2018-6521