● CVE — High
CVE-2019-19906
Vendordebian, fedoraproject, canonical, redhat, appleProductdebian linux, fedora, ubuntu linux, enterprise linux, enterprise linux eus, enterprise linux for ibm z systems, enterprise linux for ibm z systems eus, enterprise linux for power little endian, enterprise linux for power little endian eus, enterprise linux server aus, enterprise linux server for power little endian update services for sap solutions, enterprise linux server tus, enterprise linux server update services for sap solutions, jboss enterprise web server, iphone os, mac os x, ipados, bookkeeper, cyrus saslDiscoveredDec 19, 2019UpdatedNov 21, 2024
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.