cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType

Cyrus SASL 2.1.27 causes unauthenticated DoS in OpenLDAP via off-by-one in _sasl_add_string.

Reporter	Title	Published	Views	Family All 123
IBM Security Bulletins	Security Bulletin: IBM Bootable Media Creator (BoMC) is affected by a vulnerability in cyrus-sasl (CVE-2019-19906)	21 Jun 202119:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-ze	24 Jul 202021:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
FreeBSD	cyrus-sasl -- Fix off by one error	19 Dec 201900:00	–	freebsd
Tenable Nessus	Alibaba Cloud Linux 3 : 0013: cyrus-sasl (ALINUX3-SA-2022:0013)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : cyrus-sasl (ALSA-2020:4497)	9 Feb 202200:00	–	nessus
Tenable Nessus	Apple iOS < 13.6 Multiple Vulnerabilities	17 Jul 202000:00	–	nessus
Tenable Nessus	CentOS 8 : cyrus-sasl (CESA-2020:4497)	1 Feb 202100:00	–	nessus
Tenable Nessus	Debian DLA-2044-1 : cyrus-sasl2 security update	23 Dec 201900:00	–	nessus
Tenable Nessus	Debian DSA-4591-1 : cyrus-sasl2 - security update	23 Dec 201900:00	–	nessus