38 matches found
SUSE SLES12 Security Update : cyrus-sasl (SUSE-SU-2020:3939-1)
This update for cyrus-sasl fixes the following issues : CVE-2019-19906: Fixed an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet bsc1159635. Note that Tenable Network Security has extracted the preceding description block directly fr...
SUSE-SU-2020:3939-1 Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issues: - CVE-2019-19906: Fixed an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet bsc1159635...
SUSE-SU-2020:14579-1 Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issues: - CVE-2019-19906: Fixed an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet bsc1159635...
cyrus-sasl security, bug fix, and enhancement update
2.1.27-5 - Reduce excessive GSSAPI plugin logging - Resolves: rhbz1274734 2.1.27-4 - Add support for setting maxssf=0 in GSS-SPNEGO - Resolves: rhbz1822133 2.1.27-3 - Backport GSSAPI Channel Bindings support - Resolves: rhbz1817054 2.1.27-2 - Backport fix for CVE-2019-19906 - Resolves: rhbz180403...
Moderate: Red Hat Security Advisory: cyrus-sasl security, bug fix, and enhancement update
An update for cyrus-sasl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
RHEL 8 : cyrus-sasl (RHSA-2020:4497)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4497 advisory. The cyrus-sasl packages contain the Cyrus implementation of Simple Authentication and Security Layer SASL. SASL is a method for adding authentication...
EulerOS 2.0 SP5 : cyrus-sasl (EulerOS-SA-2020-2281)
According to the version of the cyrus-sasl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - cyrus-sasl aka Cyrus SASL 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDA...
CVE-2019-19906 affecting package cyrus-sasl 2.1.27-4
CVE-2019-19906 affecting package cyrus-sasl 2.1.27-4. A patched version of the package is available...
Huawei EulerOS: Security Advisory for cyrus-sasl (EulerOS-SA-2020-1631)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : cyrus-sasl (EulerOS-SA-2020-1377)
According to the version of the cyrus-sasl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - cyrus-sasl aka Cyrus SASL 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDA...
Fedora 31 : cyrus-sasl (2020-bf829f9a84)
Security fix for CVE 2019 19906 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...
Fedora: Security Advisory for cyrus-sasl (FEDORA-2020-51d591d035)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
EulerOS Virtualization for ARM 64 3.0.6.0 : cyrus-sasl (EulerOS-SA-2020-1336)
According to the version of the cyrus-sasl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This...
USN-4256-1: Cyrus SASL vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that Cyrus SASL incorrectly handled certain LDAP packets. An attacker could possibly use this issue to execute arbitrary code or cause a...
Debian DSA-4591-1 : cyrus-sasl2 - security update
Stephan Zeisberg reported an out-of-bounds write vulnerability in the sasladdstring function in cyrus-sasl2, a library implementing the Simple Authentication and Security Layer. A remote attacker can take advantage of this issue to cause denial-of-service conditions for applications using the...
CVE-2019-19906
CVE-2019-19906 affects Cyrus SASL 2.1.27 (and related builds) with an out-of-bounds write in _sasl_add_string in common.c, leading to unauthenticated remote denial-of-service when processing malformed LDAP packets (used by OpenLDAP in the chain). Remediation is to upgrade to a patched Cyrus SASL ...
CVE-2018-19906
CVE-2018-19906 affects razorCMS 3.4.8. The vulnerability is a Stored XSS via the /#/page endpoint, specifically the description parameter. Root cause is not explicitly detailed beyond the XSS in the description field. Impact is partial integrity impact (per CVSS) with low confidentiality and inte...
