AZL-107300 CVE-2026-107161 affecting package cyrus-sasl-bootstrap 2.1.28-8

A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...

Fedora Core 4 : cyrus-sasl-2.1.20-6 (2006-515)

This update incorporates a fix for a bug which would allow a client which attempted DIGEST-MD5 authentication with a server to cause the DIGEST-MD5 plugin on the server to crash. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

cyrus-sasl -- potential buffer overflow in DIGEST-MD5 plugin

The Cyrus SASL DIGEST-MD5 plugin contains a potential buffer overflow when quoting is required in the output...