Yüksek CVSS 7.5 PoC var
CVE-2019-19906: Cyrus-sasl: güvenlik açığı
Açıklama (NVD)
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
Özet bilgiler
- Ürün
- Cyrusimap Cyrus-sasl
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %8,04 (yüzdelik 95)
- CWE
- CWE-193
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| cyrusimap-cyrus-sasl | — | — | 2.1.28 |
| debian-debian-linux | 8.0 | 8.0 | — |
| debian-debian-linux | 9.0 | 9.0 | — |
| debian-debian-linux | 10.0 | 10.0 | — |
| canonical-ubuntu-linux | 12.04 | 12.04 | — |
| canonical-ubuntu-linux | 14.04 | 14.04 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| canonical-ubuntu-linux | 18.04 | 18.04 | — |
| canonical-ubuntu-linux | 19.10 | 19.10 | — |
| fedoraproject-fedora | 31 | 31 | — |
| fedoraproject-fedora | 32 | 32 | — |
| redhat-jboss-enterprise-web-server | 2.0.0 | 2.0.0 | — |
| apple-mac-os-x | 10.14.6 | 10.14.6 | — |
| redhat-enterprise-linux | 5.0 | 5.0 | — |
| redhat-enterprise-linux | 6.0 | 6.0 | — |
| redhat-enterprise-linux | 7.0 | 7.0 | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-enterprise-linux-eus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-for-ibm-z-systems | 8.0 | 8.0 | — |
| redhat-enterprise-linux-for-ibm-z-systems-eus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-for-power-little-endian | 8.0 | 8.0 | — |
| redhat-enterprise-linux-for-power-little-endian-eus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-server-aus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-server-for-power-little-endian-update-services-for-sap-solutions | 8.4 | 8.4 | — |
| redhat-enterprise-linux-server-tus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-server-update-services-for-sap-solutions | 8.4 | 8.4 | — |
| apple-ipados | 13.6 | 13.6 | — |
| apple-iphone-os | 13.6 | 13.6 | — |
| apple-mac-os-x | — | — | 10.13.6 |
| apple-mac-os-x | 10.13.0 | — | 10.13.6 |
Kaynaklar
- NVD kaydı
- seclists.org
- seclists.org
- www.openwall.com
- github.com
- lists.apache.org
- lists.apache.org
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- seclists.org
- support.apple.com
- support.apple.com
- usn.ubuntu.com
- www.debian.org
- www.openldap.org
- seclists.org
- seclists.org
- www.openwall.com
- github.com
- lists.apache.org
- lists.apache.org
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- CWE-193