Red Hat Security AdvisoryRHSA-2020:4497
cyrus-sasl security, bug fix, and enhancement update
Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) cyrus-sasl-sql-2.1.27-5.el8
- Red Hat Enterprise Linux BaseOS (v. 8) cyrus-sasl-2.1.27-5.el8, cyrus-sasl-devel-2.1.27-5.el8, cyrus-sasl-gs2-2.1.27-5.el8 +7
Fixes 1 record
Priority MEDIUM 44
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.08036 · Published 2019-12-19 · Partial fix CWE-193
