AZL-8794 CVE-2022-24407 affecting package cyrus-sasl for versions less than 2.1.28-1

🗓️ 24 Feb 2022 15:15:29Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Cyrus SASL: sql.c fails to escape passwords in SQL statements, affecting 2.1.17 to 2.1.27.

Reporter	Title	Published	Views	Family All 224
FreeBSD	cyrus-sasl -- Escape password for SQL insert/update commands	4 Feb 202200:00	–	freebsd
FreeBSD	MySQL -- Multiple vulnerabilities	20 Jan 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Vulnerability in Cyrus SASL.(CVE-2022-24407)	7 Jul 202210:40	–	ibm
IBM Security Bulletins	Security Bulletin: A Cyrus SASL vulnerability affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2022-24407)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	9 Nov 202218:38	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities have been fixed in IBM Security Access Manager appliance (CVE-2022-24407, CVE-2020-25709, CVE-2020-25710)	20 Jul 202219:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with multiple known vulnerabilities	23 Aug 202213:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	20 Aug 202218:29	–	ibm
ATTACKERKB	CVE-2022-24407	24 Feb 202215:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : cyrus-sasl, cyrus-sasl-devel, cyrus-sasl-gs2 (ALAS2022-2022-035)	6 Sep 202200:00	–	nessus