2 matches found
Debian Security Advisory DSA 1807-1 (cyrus-sasl2, cyrus-sasl2-heimdal)
The remote host is missing an update to cyrus-sasl2, cyrus-sasl2-heimdal announced via advisory DSA 1807-1. OpenVAS Vulnerability Test $Id: deb18071.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1807-1 cyrus-sasl2, cyrus-sasl2-heimdal Authors: Thomas Rein...
Debian DSA-1807-1 : cyrus-sasl2, cyrus-sasl2-heimdal - buffer overflow
"James Ralston discovered that the saslencode64 function of cyrus-sasl2, a free library implementing the Simple Authentication and Security Layer, suffers from a missing null termination in certain situations. This causes several buffer overflows in situations where cyrus-sasl2 itself requires th...