Unscored RHSA-2022:0780 1 CVE

Red Hat Security Advisory: cyrus-sasl security update

Published Sep 13, 2024 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 10

Release	Package	Fixed in
Red Hat · RHEL 6 ELS rhel_els:6	cyrus-sasl	0:2.1.23-16.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	cyrus-sasl-debuginfo	0:2.1.23-16.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	cyrus-sasl-devel	0:2.1.23-16.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	cyrus-sasl-gssapi	0:2.1.23-16.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	cyrus-sasl-ldap	0:2.1.23-16.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	cyrus-sasl-lib	0:2.1.23-16.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	cyrus-sasl-md5	0:2.1.23-16.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	cyrus-sasl-ntlm	0:2.1.23-16.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	cyrus-sasl-plain	0:2.1.23-16.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	cyrus-sasl-sql	0:2.1.23-16.el6_10

Vulnerabilities 1

Unscored —

CVE-2022-24407

In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDAT…

cyrus-sasl2 cyrus-sasl cyrus-sasl cyrus-sasl2 Debian Ubuntu Azure Linux Alpine

Feb 23, 2022

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2055326
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0780.json
report
https://access.redhat.com/security/cve/CVE-2022-24407
advisory
https://www.cve.org/CVERecord?id=CVE-2022-24407
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-24407
article
https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28