Every CVE Search/ Get API key

CVE-2006-1721

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and...

2.6 LowFix available

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.

Exploit likelihood

2.49%Down 1.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.6

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.

Record
CVE-2006-1721
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.

Record
CVE-2006-1721
Updated
2026-11-02
EUVDEUVD-2006-1721 No score

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.

Record
EUVD-2006-1721
Updated
2026-11-03
GitHub AdvisoriesGHSA-x5mm-w7g6-r6fq No score

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and...

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.

Record
GHSA-x5mm-w7g6-r6fq
Weakness
CWE-20
Updated
2026-11-02
OSV No score

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.

Record
CVE-2006-1721
Updated
2026-11-02
OSVDEBIAN-CVE-2006-1721 No score

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.

Record
DEBIAN-CVE-2006-1721
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cyrus-sasl2
Debian:12
 before 2.1.19.dfsg1-0.2
2.1.19.dfsg1-0.2
cyrus-sasl2
Debian:13
 before 2.1.19.dfsg1-0.2
2.1.19.dfsg1-0.2
cyrus-sasl2
Debian:14
 before 2.1.19.dfsg1-0.2
2.1.19.dfsg1-0.2
cyrus-sasl2
Debian:3.1
 before 2.1.19-1.5sarge1, plus listed versions
2.1.19-1.5
2.1.19-1.5sarge1
cyrus-sasl
Red Hat:enterprise_linux:4::as
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-devel
Red Hat:enterprise_linux:4::as
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-gssapi
Red Hat:enterprise_linux:4::as
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-md5
Red Hat:enterprise_linux:4::as
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-ntlm
Red Hat:enterprise_linux:4::as
 before 0:2.1.19-14
0:2.1.19-14
Show 50 moreShow less
Affected packages
PackageAffectedFixed
cyrus-sasl-plain
Red Hat:enterprise_linux:4::as
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-sql
Red Hat:enterprise_linux:4::as
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl
Red Hat:enterprise_linux:4::desktop
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-gssapi
Red Hat:enterprise_linux:4::desktop
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-md5
Red Hat:enterprise_linux:4::desktop
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-ntlm
Red Hat:enterprise_linux:4::desktop
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-plain
Red Hat:enterprise_linux:4::desktop
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-sql
Red Hat:enterprise_linux:4::desktop
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl
Red Hat:enterprise_linux:4::es
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-devel
Red Hat:enterprise_linux:4::es
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-gssapi
Red Hat:enterprise_linux:4::es
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-md5
Red Hat:enterprise_linux:4::es
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-ntlm
Red Hat:enterprise_linux:4::es
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-plain
Red Hat:enterprise_linux:4::es
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-sql
Red Hat:enterprise_linux:4::es
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl
Red Hat:enterprise_linux:4::ws
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-gssapi
Red Hat:enterprise_linux:4::ws
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-md5
Red Hat:enterprise_linux:4::ws
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-ntlm
Red Hat:enterprise_linux:4::ws
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-plain
Red Hat:enterprise_linux:4::ws
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl-sql
Red Hat:enterprise_linux:4::ws
 before 0:2.1.19-14
0:2.1.19-14
cyrus-sasl
Red Hat:enterprise_linux:3::as
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-devel
Red Hat:enterprise_linux:3::as
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-gssapi
Red Hat:enterprise_linux:3::as
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-md5
Red Hat:enterprise_linux:3::as
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-plain
Red Hat:enterprise_linux:3::as
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl
Red Hat:enterprise_linux:3::desktop
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-devel
Red Hat:enterprise_linux:3::desktop
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-gssapi
Red Hat:enterprise_linux:3::desktop
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-md5
Red Hat:enterprise_linux:3::desktop
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-plain
Red Hat:enterprise_linux:3::desktop
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl
Red Hat:enterprise_linux:3::es
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-devel
Red Hat:enterprise_linux:3::es
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-gssapi
Red Hat:enterprise_linux:3::es
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-md5
Red Hat:enterprise_linux:3::es
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-plain
Red Hat:enterprise_linux:3::es
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl
Red Hat:enterprise_linux:3::ws
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-devel
Red Hat:enterprise_linux:3::ws
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-gssapi
Red Hat:enterprise_linux:3::ws
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-md5
Red Hat:enterprise_linux:3::ws
 before 0:2.1.15-15
0:2.1.15-15
cyrus-sasl-plain
Red Hat:enterprise_linux:3::ws
 before 0:2.1.15-15
0:2.1.15-15

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-1721 is a low vulnerability (CVSS 2.6) in Cyrus Sasl, published April 11, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.49%, the 84th percentile. Fixed in cyrus-sasl2 2.1.19.dfsg1-0.2.

References

Show 45 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open