{"id":"CVE-2026-86219","aliases":["BELL-CVE-2026-86219","DEBIAN-CVE-2026-86219","EUVD-2026-72163","GHSA-w4h4-7ff5-56xr","MGASA-2026-0400","OESA-2026-3775","OESA-2026-3776","OESA-2026-3777","OESA-2026-3778","OESA-2026-4004","ROOT-OS-DEBIAN-12-CVE-2026-86219","SUSE-SU-2026:23913-1","SUSE-SU-2026:4280-1","SUSE-SU-2026:4302-1","UBUNTU-CVE-2026-86219","USN-8858-1","openSUSE-SU-2026:11734-1","openSUSE-SU-2026:21946-1"],"status":"published","title":"Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step","description":"Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step.\n\nserver_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. server_step derives the expected digest from the client's own parameters, so a response verifies whenever its digest matches the nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831 defines the nonce in the response as the value the server sent in the preceding challenge.\n\nAn attacker who observes one successful `qop=auth` exchange can replay the captured response against a later session for the same service, host, realm and user, and authenticate as that user without knowing the password.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00646,"percentile":0.51291,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-294"],"published":"2026-09-06T17:46:30Z","modified":"2026-10-28T02:30:26Z","fixes":[{"ecosystem":"Alpaquita:stream","package":"perl-authen-sasl","fixed_in":["2.2100-r0"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libauthen-sasl-perl","fixed_in":["2.2000-2"],"sources":["osv"]},{"ecosystem":"Mageia:10","package":"perl-Authen-SASL","fixed_in":["2.190.0-1.1.mga10"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"perl-Authen-SASL","fixed_in":["2.160.0-13.2.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"perl-Authen-SASL","fixed_in":["2.1700-3.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"perl-Authen-SASL","fixed_in":["2.1700-3.oe2403sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"perl-Authen-SASL","fixed_in":["2.16-18.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"perl-Authen-SASL","fixed_in":["2.1700-3.oe2403sp3"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"libauthen-sasl-perl","fixed_in":["2.1600-3.aikido.1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-libauthen-sasl-perl","fixed_in":["2.1600-3.aikido.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"perl-Authen-SASL","fixed_in":["2.170.0-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"perl-Authen-SASL","fixed_in":["2.170.0-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"perl-Authen-SASL","fixed_in":["2.16-5.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"perl-Authen-SASL","fixed_in":["2.16-5.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"perl-Authen-SASL","fixed_in":["2.16-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"perl-Authen-SASL","fixed_in":["2.16-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"perl-Authen-SASL","fixed_in":["2.16-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"perl-Authen-SASL","fixed_in":["2.16-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"perl-Authen-SASL","fixed_in":["2.16-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"perl-Authen-SASL","fixed_in":["2.16-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"perl-Authen-SASL","fixed_in":["2.16-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"perl-Authen-SASL","fixed_in":["2.16-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"perl-Authen-SASL","fixed_in":["2.16-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"perl-Authen-SASL","fixed_in":["2.16-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"perl-Authen-SASL","fixed_in":["2.16-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libauthen-sasl-perl","fixed_in":["2.1500-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libauthen-sasl-perl","fixed_in":["2.1600-1ubuntu0.16.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libauthen-sasl-perl","fixed_in":["2.1600-1ubuntu0.18.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libauthen-sasl-perl","fixed_in":["2.1600-1ubuntu0.20.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libauthen-sasl-perl","fixed_in":["2.1600-1.1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libauthen-sasl-perl","fixed_in":["2.1700-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"libauthen-sasl-perl","fixed_in":["2.2000-1ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"libauthen-sasl-perl","fixed_in":["2.2000-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"perl-Authen-SASL","fixed_in":["2.210.0-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"perl-Authen-SASL","fixed_in":["2.170.0-160000.4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:stream","package":"perl-authen-sasl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.16-r3"},{"fixed":"2.2100-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1600-3","2.1700-1","2.1800-1","2.1900-1","2.2000-1","2.2000-2"]},{"source":"osv","ecosystem":"Debian:13","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1700-1","2.1800-1","2.1900-1","2.2000-1","2.2000-2"]},{"source":"osv","ecosystem":"Debian:14","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2000-2"}]}],"versions":["2.1700-1","2.1800-1","2.1900-1","2.2000-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.190.0-1.1.mga10"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.160.0-13.2.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1700-3.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1700-3.oe2403sp4"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-18.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-18.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1700-3.oe2403sp3"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1600-3.aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1600-3.aikido.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.170.0-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.170.0-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-5.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-5.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1500-1ubuntu0.1~esm1"}]}],"versions":["2.1500-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1600-1ubuntu0.16.04.1~esm1"}]}],"versions":["2.1600-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1600-1ubuntu0.18.04.1~esm1"}]}],"versions":["2.1600-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1600-1ubuntu0.20.04.1~esm1"}]}],"versions":["2.1600-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1600-1.1ubuntu0.1"}]}],"versions":["2.1600-1.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1700-1ubuntu0.1"}]}],"versions":["2.1600-3","2.1700-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2000-1ubuntu1"}]}],"versions":["2.2000-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2000-1ubuntu0.1"}]}],"versions":["2.1700-1","2.2000-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1500-1ubuntu0.1~esm1"}]}],"versions":["2.1500-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1600-1ubuntu0.16.04.1~esm1"}]}],"versions":["2.1600-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1600-1ubuntu0.18.04.1~esm1"}]}],"versions":["2.1600-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1600-1ubuntu0.20.04.1~esm1"}]}],"versions":["2.1600-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1600-1.1ubuntu0.1"}]}],"versions":["2.1600-1.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1700-1ubuntu0.1"}]}],"versions":["2.1600-3","2.1700-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libauthen-sasl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2000-1ubuntu0.1"}]}],"versions":["2.1700-1","2.2000-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.210.0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"perl-Authen-SASL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.170.0-160000.4.1"}]}]}],"references":[{"url":"https://metacpan.org/release/EHUELS/Authen-SASL-2.2000/source/lib/Authen/SASL/Perl/DIGEST_MD5.pm#L203-222","tags":["web"]},{"url":"https://metacpan.org/release/EHUELS/Authen-SASL-2.2000/source/lib/Authen/SASL/Perl/DIGEST_MD5.pm#L410-414","tags":["web"]},{"url":"https://datatracker.ietf.org/doc/html/rfc2831#section-2.1.2","tags":["web"]},{"url":"https://github.com/perl-authen-sasl/perl-authen-sasl/commit/94337367030612842924f697cead29964a96448d.patch","tags":["patch","fix"]},{"url":"https://metacpan.org/release/EHUELS/Authen-SASL-2.2100/changes","tags":["release-notes","advisory","web"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-40918","tags":["related","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86219","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-w4h4-7ff5-56xr"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-86219","tags":["advisory"]},{"url":"https://cpan.org/modules","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86219.json","tags":["advisory"]},{"url":"https://github.com/perl-authen-sasl/perl-authen-sasl","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-86219","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0400.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36264","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/09/06/1","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3775","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3776","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40918","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3778","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4004","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623913-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1279806","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-86219","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264280-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264302-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-86219","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-86219","tags":["report"]},{"url":"https://lists.security.metacpan.org/cve-announce/msg/43326063/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8858-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-86219","title":"Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step","description":"Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step.\n\nserver_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. server_step derives the expected digest from the client's own parameters, so a response verifies whenever its digest matches the nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831 defines the nonce in the response as the value the server sent in the preceding challenge.\n\nAn attacker who observes one successful `qop=auth` exchange can replay the captured response against a later session for the same service, host, realm and user, and authenticate as that user without knowing the password.","status":"published","published":"2026-09-06T17:46:30.34Z","modified":"2026-09-08T18:54:55.841Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T13:49:42.666099Z"}],"euvd":[{"id":"EUVD-2026-72163","description":"Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step.\n\nserver_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. server_step derives the expected digest from the client's own parameters, so a response verifies whenever its digest matches the nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831 defines the nonce in the response as the value the server sent in the preceding challenge.\n\nAn attacker who observes one successful `qop=auth` exchange can replay the captured response against a later session for the same service, host, realm and user, and authenticate as that user without knowing the password.","status":"published","published":"2026-09-06T17:46:30Z","modified":"2026-09-08T18:54:55Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T17:28:28.557436Z"}],"ghsa":[{"id":"GHSA-w4h4-7ff5-56xr","title":"Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication...","description":"Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step.\n\nserver_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. server_step derives the expected digest from the client's own parameters, so a response verifies whenever its digest matches the nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831 defines the nonce in the response as the value the server sent in the preceding challenge.\n\nAn attacker who observes one successful `qop=auth` exchange can replay the captured response against a later session for the same service, host, realm and user, and authenticate as that user without knowing the password.","status":"published","published":"2026-09-06T18:34:39Z","modified":"2026-09-08T21:34:07Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T15:11:35.275364Z"}],"nvd":[{"id":"CVE-2026-86219","description":"Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step.\n\nserver_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. server_step derives the expected digest from the client's own parameters, so a response verifies whenever its digest matches the nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831 defines the nonce in the response as the value the server sent in the preceding challenge.\n\nAn attacker who observes one successful `qop=auth` exchange can replay the captured response against a later session for the same service, host, realm and user, and authenticate as that user without knowing the password.","status":"published","published":"2026-09-06T18:17:23.027Z","modified":"2026-09-08T19:20:10.77Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T14:12:44.082631Z"}],"osv":[{"id":"BELL-CVE-2026-86219","status":"published","published":"2026-09-08T06:05:31.397821Z","modified":"2026-10-02T07:15:05.057514924Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:26.341144Z"},{"id":"CVE-2026-86219","title":"Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step","description":"Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step.\n\nserver_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. server_step derives the expected digest from the client's own parameters, so a response verifies whenever its digest matches the nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831 defines the nonce in the response as the value the server sent in the preceding challenge.\n\nAn attacker who observes one successful `qop=auth` exchange can replay the captured response against a later session for the same service, host, realm and user, and authenticate as that user without knowing the password.","status":"published","published":"2026-09-06T17:46:30.34Z","modified":"2026-10-28T02:30:26.272490548Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T15:45:18.825071Z"},{"id":"DEBIAN-CVE-2026-86219","description":"Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step.  server_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. server_step derives the expected digest from the client's own parameters, so a response verifies whenever its digest matches the nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831 defines the nonce in the response as the value the server sent in the preceding challenge.  An attacker who observes one successful `qop=auth` exchange can replay the captured response against a later session for the same service, host, realm and user, and authenticate as that user without knowing the password.","status":"published","published":"2026-09-06T18:17:23.027Z","modified":"2026-10-01T03:03:43.676282086Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:46:05.022702Z"},{"id":"OESA-2026-3775","title":"perl-Authen-SASL security update","description":"Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework, At the time of this writing it provides the client part implementation for the following SASL mechanisms.\r\n\r\nSecurity Fix(es):\n\nAuthen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step. server_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. server_step derives the expected digest from the client\u0026apos;s own parameters, so a response verifies whenever its digest matches the nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831 defines the nonce in the response as the value the server sent in the preceding challenge. An attacker who observes one successful `qop=auth` exchange can replay the captured response against a later session for the same service, host, realm and user, and authenticate as that user without knowing the password.(CVE-2026-86219)","status":"published","published":"2026-09-14T16:34:14Z","modified":"2026-09-13T16:45:39.217005703Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3776","title":"perl-Authen-SASL security update","description":"Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework, At the time of this writing it provides the client part implementation for the following SASL mechanisms.\r\n\r\nSecurity Fix(es):\n\nAuthen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step. server_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. server_step derives the expected digest from the client\u0026apos;s own parameters, so a response verifies whenever its digest matches the nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831 defines the nonce in the response as the value the server sent in the preceding challenge. An attacker who observes one successful `qop=auth` exchange can replay the captured response against a later session for the same service, host, realm and user, and authenticate as that user without knowing the password.(CVE-2026-86219)","status":"published","published":"2026-09-14T16:34:14Z","modified":"2026-09-13T16:45:39.460324613Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3777","title":"perl-Authen-SASL security update","description":"Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework, At the time of this writing it provides the client part implementation for the following SASL mechanisms.\r\n\r\nSecurity Fix(es):\n\nAuthen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is generated from an MD5 hash of the PID, the epoch time and the built-in rand function. The PID comes from a small set of numbers, and the epoch time may be guessed if not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. According to RFC 2831, the cnonce-value should be provided by the client and contain at least 64 bits of entropy to ensure security.(CVE-2025-40918)\n\nAuthen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step. server_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. server_step derives the expected digest from the client\u0026apos;s own parameters, so a response verifies whenever its digest matches the nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831 defines the nonce in the response as the value the server sent in the preceding challenge. An attacker who observes one successful `qop=auth` exchange can replay the captured response against a later session for the same service, host, realm and user, and authenticate as that user without knowing the password.(CVE-2026-86219)","status":"published","published":"2026-09-14T16:34:15Z","modified":"2026-09-13T16:45:39.214261769Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3778","title":"perl-Authen-SASL security update","description":"Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework, At the time of this writing it provides the client part implementation for the following SASL mechanisms.\r\n\r\nSecurity Fix(es):\n\nAuthen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step. server_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. server_step derives the expected digest from the client\u0026apos;s own parameters, so a response verifies whenever its digest matches the nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831 defines the nonce in the response as the value the server sent in the preceding challenge. An attacker who observes one successful `qop=auth` exchange can replay the captured response against a later session for the same service, host, realm and user, and authenticate as that user without knowing the password.(CVE-2026-86219)","status":"published","published":"2026-09-14T16:34:16Z","modified":"2026-09-13T16:45:39.22332619Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-4004","title":"perl-Authen-SASL security update","description":"Authen::SASL::Perl is the pure Perl implementation of SASL mechanisms in the Authen::SASL framework, At the time of this writing it provides the client part implementation for the following SASL mechanisms.\r\n\r\nSecurity Fix(es):\n\nAuthen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step.\n\nserver_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. server_step derives the expected digest from the client\u0026apos;s own parameters, so a response verifies whenever its digest matches the nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831 defines the nonce in the response as the value the server sent in the preceding challenge.\n\nAn attacker who observes one successful `qop=auth` exchange can replay the captured response against a later session for the same service, host, realm and user, and authenticate as that user without knowing the password.(CVE-2026-86219)","status":"published","published":"2026-09-20T13:24:02Z","modified":"2026-09-20T13:30:28.777942112Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"UBUNTU-CVE-2026-86219","description":"Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step. server_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. server_step derives the expected digest from the client's own parameters, so a response verifies whenever its digest matches the nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831 defines the nonce in the response as the value the server sent in the preceding challenge. An attacker who observes one successful `qop=auth` exchange can replay the captured response against a later session for the same service, host, realm and user, and authenticate as that user without knowing the password.","status":"published","published":"2026-09-06T18:17:00Z","modified":"2026-10-17T13:01:13.516107519Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:57:24.828975Z"},{"id":"MGASA-2026-0400","title":"Updated perl-Authen-SASL packages fix a security vulnerability","description":"Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept\nreplayed authentication responses via unverified nonce in server_step.\n(CVE-2026-86219)\n","status":"published","published":"2026-09-14T16:26:35Z","modified":"2026-09-14T16:30:43.397450054Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11734-1","title":"perl-Authen-SASL-2.210.0-1.1 on GA media","description":"These are all security issues fixed in the perl-Authen-SASL-2.210.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-09T00:00:00Z","modified":"2026-09-10T18:23:22.571362678Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21946-1","title":"Security update for perl-Authen-SASL","description":"This update for perl-Authen-SASL fixes the following issue:\n\n- CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in `server_step` (bsc#1279806).\n","status":"published","published":"2026-09-24T09:10:44Z","modified":"2026-09-25T18:23:14.535175033Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-86219","title":"CVE-2026-86219 in libauthen-sasl-perl - Patched by Root","description":"Root has patched CVE-2026-86219 in the libauthen-sasl-perl package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-09-21T12:40:37Z","modified":"2026-09-21T13:15:02.99456564Z","updated_at":"2026-11-02T15:53:32.570806Z"},{"id":"SUSE-SU-2026:23913-1","title":"Security update for perl-Authen-SASL","description":"This update for perl-Authen-SASL fixes the following issue:\n\n- CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in `server_step` (bsc#1279806).\n","status":"published","published":"2026-09-24T09:10:39Z","modified":"2026-09-30T18:23:12.617743339Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4280-1","title":"Security update for perl-Authen-SASL","description":"This update for perl-Authen-SASL fixes the following issue:\n\n- CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in `server_step` (bsc#1279806).\n","status":"published","published":"2026-09-22T08:32:16Z","modified":"2026-09-23T09:15:05.344474091Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4302-1","title":"Security update for perl-Authen-SASL","description":"This update for perl-Authen-SASL fixes the following issue:\n\n- CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in `server_step` (bsc#1279806).\n","status":"published","published":"2026-09-23T11:37:22Z","modified":"2026-09-23T18:15:03.523228422Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-8858-1","title":"libauthen-sasl-perl vulnerability","description":"It was discovered that Authen::SASL, a Perl authentication library, did\nnot properly validate login attempts. An attacker could possibly use\nthis issue to gain unauthorized access.","status":"published","published":"2026-09-30T16:40:43Z","modified":"2026-10-01T00:27:47.433715926Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}