Description
Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | cyrus-sasl2 | 2.1.23.dfsg1-1 | — |
| Debian 13 | cyrus-sasl2 | 2.1.23.dfsg1-1 | — |
| Debian 12 | cyrus-sasl2 | 2.1.23.dfsg1-1 | — |
| Debian 6.0 | cyrus-sasl2 +1 | 2.1.22.dfsg1-23+squeeze1 | DTSA-201-1, DTSA-200-1 |
| Debian 5.0 | cyrus-sasl2 +1 | 2.1.22.dfsg1-23+lenny1 | DSA-1807-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | cyrus-sasl2 | 2.1.22.dfsg1-8+etch1 | DSA-1807-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | cyrus-imapd +3 | 2.3.7-2.el5_3.2 | RHSA-2009:1116 |
| RHEL 4 | perl-Cyrus +5 | 2.2.12-10.el4_8.1 | RHSA-2009:1116 |
Advisories 4
- RHSA-2009:1116 Red Hat Security Advisory: cyrus-imapd security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1807-1 cyrus-sasl2 cyrus-sasl2-heimdal - arbitrary code execution Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-201-1 cyrus-sasl2-heimdal - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-200-1 cyrus-sasl2 - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- 54515 vdb-entry
- 35239 third-party-advisory
- TA10-103B third-party-advisory
- 35321 third-party-advisory
- VU#238019 third-party-advisory
- 35497 third-party-advisory
- 35102 third-party-advisory
- SSA:2009-134-01 vendor-advisory
- 35746 third-party-advisory
- 39428 third-party-advisory
- 1020755 vendor-advisory
- 35094 third-party-advisory
- APPLE-SA-2010-03-29-1 vendor-advisory
- DSA-1807 vendor-advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0091
- oval:org.mitre.oval:def:6136 vdb-entry signature
- 35097 third-party-advisory
- ADV-2009-1313 vdb-entry
- ADV-2009-2012 vdb-entry
- oval:org.mitre.oval:def:10687 vdb-entry signature
- SUSE-SR:2009:011 vendor-advisory
- 1021699 vendor-advisory
- GLSA-200907-09 vendor-advisory
- http://support.apple.com/kb/HT4077
- http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html
- http://support.avaya.com/elmodocs2/security/ASA-2009-184.htm
- 264248 vendor-advisory
- 35206 third-party-advisory
- 259148 vendor-advisory
- MDVSA-2009:113 vendor-advisory
- RHSA-2009:1116 vendor-advisory
- 34961 vdb-entry
- 35416 third-party-advisory
- 273910 vendor-advisory
- 54514 vdb-entry
- USN-790-1 vendor-advisory
- 1022231 vdb-entry
- solaris-sasl-saslencode64-bo(50554) vdb-entry