Lucene search
+L

21 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/26 12:00 a.m.•4 views

FreeBSD : p5-Authen-SASL -- Replay attack in Authen::SASL::Perl::DIGEST_MD5 (023a3d0c-b987-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 023a3d0c-b987-11f1-ad2b-40b034429ecf advisory. Authen-SASL project reports: Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept...

9.8CVSS5.9AI score0.00468EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/20 1:24 p.m.•8 views

OESA-2026-4004 perl-Authen-SASL security update

Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework, At the time of this writing it provides the client part implementation for the following SASL mechanisms. Security Fixes: Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept...

6.5CVSS5.8AI score0.00468EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/15 12:00 a.m.•11 views

Fedora 44 : perl-Authen-SASL (2026-53e2875c88)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-53e2875c88 advisory. 2.2100 - CVE-2026-86219: Replay attack in Authen::SASL::Perl::DIGESTMD5 Thanks to TIMLEGGE @timlegge and the CPANSec team for the AI-assisted detection and...

9.8CVSS5.9AI score0.00468EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/15 12:00 a.m.•10 views

Fedora 45 : perl-Authen-SASL (2026-81cd7d0f41)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-81cd7d0f41 advisory. 2.2100 - CVE-2026-86219: Replay attack in Authen::SASL::Perl::DIGESTMD5 Thanks to TIMLEGGE @timlegge and the CPANSec team for the AI-assisted detection and...

9.8CVSS5.9AI score0.00468EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/14 4:34 p.m.•9 views

OESA-2026-3778 perl-Authen-SASL security update

Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework, At the time of this writing it provides the client part implementation for the following SASL mechanisms. Security Fixes: Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept...

6.5CVSS5.7AI score0.00468EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/14 4:34 p.m.•8 views

OESA-2026-3777 perl-Authen-SASL security update

Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework, At the time of this writing it provides the client part implementation for the following SASL mechanisms. Security Fixes: Authen::SASL::Perl::DIGESTMD5 versions 2.04 through 2.1800 for Perl...

6.5CVSS6.5AI score0.00468EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/06 6:17 p.m.•11 views

CVE-2026-86219

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...

9.8CVSS0.00468EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2026/09/06 6:17 p.m.•5 views

CVE-2026-86219

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/06 6:17 p.m.•5 views

UBUNTU-CVE-2026-86219

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/09/06 5:46 p.m.•20 views

CVE-2026-86219

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...

9.8CVSS5.7AI score0.00468EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/09/06 5:46 p.m.•10 views

CVE-2026-86219 Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...

5.7AI score0.00468EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/06 5:46 p.m.•47 views

CVE-2026-86219 Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...

0.00468EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/09/06 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-86219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates...

9.8CVSS5.7AI score0.00468EPSS
SaveExploits0References3
FreeBSD
FreeBSD
•added 2026/09/06 12:00 a.m.•9 views

p5-Authen-SASL -- Replay attack in Authen::SASL::Perl::DIGEST_MD5

Authen-SASL project reports: Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/06 12:00 a.m.•3 views

CVE-2026-86219: Authentication Bypass by Capture-replay

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/29 11:11 a.m.•8 views

OESA-2026-2531 perl-Authen-SASL security update

Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework, At the time of this writing it provides the client part implementation for the following SASL mechanisms. Security Fixes: Authen::SASL::Perl::DIGESTMD5 versions 2.04 through 2.1800 for Perl...

6.5CVSS6.3AI score0.00411EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/29 11:11 a.m.•7 views

OESA-2026-2530 perl-Authen-SASL security update

Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework, At the time of this writing it provides the client part implementation for the following SASL mechanisms. Security Fixes: Authen::SASL::Perl::DIGESTMD5 versions 2.04 through 2.1800 for Perl...

6.5CVSS6.4AI score0.00411EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/11/20 12:00 a.m.•12 views

TencentOS Server 4: perl-Authen-SASL (TSSA-2025:0713)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0713 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

5.6AI score0.00411EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-21696

Malicious code in bioql PyPI...

6.5CVSS6.3AI score0.00411EPSS
SaveExploits0References5
CVE
CVE
•added 2025/07/16 2:00 p.m.•70 views

CVE-2025-40918

The Authen::SASL::Perl::DIGEST_MD5 component in Perl (versions 2.04 through 2.1800 ) generates the cnonce (client nonce) insecurely. The root cause is the use of an MD5 hash combining the Process ID (PID), epoch time, and the built-in rand function, which is unsuitable for cryptographic use. Beca...

6.5AI score0.00411EPSS
SaveExploits0References6
Rows per page
Query Builder