Skip to content
OpenAdvisories
Unscored USN-9067-1 1 CVE

charybdis vulnerability

Published Nov 12, 2026 · Updated Nov 13, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Charybdis incorrectly validated AUTHENTICATE
parameters during SASL authentication. A remote attacker could possibly use
this issue to spoof certificate fingerprints and log in as another user.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS charybdis 3.5.0-1ubuntu0.1~esm1

Vulnerabilities 1

  • Unscored —
    CVE-2016-7143

    The m_authenticate function in modules/m_sasl.c in Charybdis before 3.5.3 allows remote attackers to spoof certificate …

    charybdis Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2016-7143