Summary
It was discovered that Cyrus SASL incorrectly handled certain LDAP packets.
An attacker could possibly use this issue to execute arbitrary code or cause
a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | cyrus-sasl2 | 2.1.25.dfsg1-17ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in Op…
References
-
report
https://ubuntu.com/security/CVE-2019-19906