cyrus-sasl2 vulnerabilities (Debian)
9 vulnerabilities.
cyrus-sasl2DebianCyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients7.5 Highcyrus-sasl2DebianIn Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for...8.8 Highcyrus-sasl2Debiancyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...7.5 Highcyrus-sasl2DebianCyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned...4.3 Mediumcyrus-sasl2DebianMultiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote...7.5 Highcyrus-sasl2Debiandigestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and...2.6 Lowcyrus-sasl2DebianThe (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH...7.2 Highcyrus-sasl2DebianBuffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in...7.5 Highcyrus-sasl2DebianMultiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause...9.8 Critical