CVE catalog

CVE-2019-19906

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an

[CVE catalog]

Severity: High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: Nov 28, 2019, 12:00:00 AM UTC
Updated: Oct 14, 2026, 8:16:59 AM UTC
Source: [NVD] · [CVE record]
EPSS: 8.04% · Oct 25, 2026

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	cyrus-sasl2	sid	`2.1.28+dfsg1-12`	fixed
Debian	cyrus-sasl2	forky	`2.1.28+dfsg1-12`	fixed
Debian	cyrus-sasl2	trixie	`2.1.28+dfsg1-9`	fixed
Debian	cyrus-sasl2	bookworm	`2.1.28+dfsg-10`	fixed
Cpe	cyrus-sasl	Not reported	`2.1.28`	fixed
Cpe	debian_linux	Not reported	Not reported	unknown
Cpe	debian_linux	Not reported	Not reported	unknown
Cpe	debian_linux	Not reported	Not reported	unknown
Cpe	ubuntu_linux	Not reported	Not reported	unknown
Cpe	ubuntu_linux	Not reported	Not reported	unknown
Cpe	ubuntu_linux	Not reported	Not reported	unknown
Cpe	ubuntu_linux	Not reported	Not reported	unknown
Cpe	ubuntu_linux	Not reported	Not reported	unknown
Cpe	fedora	Not reported	Not reported	unknown
Cpe	fedora	Not reported	Not reported	unknown
Cpe	jboss_enterprise_web_server	Not reported	Not reported	unknown
Cpe	mac_os_x	Not reported	Not reported	unknown
Cpe	enterprise_linux	Not reported	Not reported	unknown
Cpe	enterprise_linux	Not reported	Not reported	unknown
Cpe	enterprise_linux	Not reported	Not reported	unknown
Cpe	enterprise_linux	Not reported	Not reported	unknown
Cpe	enterprise_linux_eus	Not reported	Not reported	unknown
Cpe	enterprise_linux_for_ibm_z_systems	Not reported	Not reported	unknown
Cpe	enterprise_linux_for_ibm_z_systems_eus	Not reported	Not reported	unknown
Alpine	cyrus-sasl	3.10	`2.1.27-r4`	fixed
Alpine	cyrus-sasl	3.11	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.12	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.13	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.14	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.15	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.16	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.17	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.18	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.19	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.20	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.21	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.22	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.23	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.24	`2.1.27-r5`	fixed
Alpine	cyrus-sasl	3.8	`2.1.26-r15`	fixed
Alpine	cyrus-sasl	3.9	`2.1.27-r2`	fixed
Ubuntu	cyrus-sasl2	pro	`2.1.25.dfsg1-17`	vulnerable
Ubuntu	cyrus-sasl2	pro	`2.1.25.dfsg1-17build1`	vulnerable
Ubuntu	cyrus-sasl2	pro	`2.1.25.dfsg1-17ubuntu0.1~esm1`	fixed
Ubuntu	cyrus-sasl2	16.04	`2.1.26.dfsg1-14`	vulnerable
Ubuntu	cyrus-sasl2	16.04	`2.1.26.dfsg1-14build1`	vulnerable
Ubuntu	cyrus-sasl2	16.04	`2.1.26.dfsg1-14ubuntu0.1`	vulnerable
Ubuntu	cyrus-sasl2	16.04	`2.1.26.dfsg1-14ubuntu0.2`	fixed
Ubuntu	cyrus-sasl2	18.04	`2.1.27~101-g0780600+dfsg-3ubuntu1`	vulnerable
Ubuntu	cyrus-sasl2	18.04	`2.1.27~101-g0780600+dfsg-3ubuntu2`	vulnerable
Ubuntu	cyrus-sasl2	18.04	`2.1.27~101-g0780600+dfsg-3ubuntu2.1`	fixed
Ubuntu	cyrus-sasl2	pro	`2.1.25.dfsg1-17`	vulnerable
Ubuntu	cyrus-sasl2	pro	`2.1.25.dfsg1-17build1`	vulnerable
Ubuntu	cyrus-sasl2	pro	`2.1.25.dfsg1-17ubuntu0.1~esm1`	fixed
Ubuntu	cyrus-sasl2	16.04	`2.1.26.dfsg1-14`	vulnerable
Ubuntu	cyrus-sasl2	16.04	`2.1.26.dfsg1-14build1`	vulnerable
Ubuntu	cyrus-sasl2	16.04	`2.1.26.dfsg1-14ubuntu0.1`	vulnerable
Ubuntu	cyrus-sasl2	16.04	`2.1.26.dfsg1-14ubuntu0.2`	fixed
Ubuntu	cyrus-sasl2	18.04	`2.1.27~101-g0780600+dfsg-3ubuntu1`	vulnerable
Ubuntu	cyrus-sasl2	18.04	`2.1.27~101-g0780600+dfsg-3ubuntu2`	vulnerable
Ubuntu	cyrus-sasl2	18.04	`2.1.27~101-g0780600+dfsg-3ubuntu2.1`	fixed
Suse	cyrus-sasl	linux enterprise high performance computing 15-espos	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise high performance computing 15-espos	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	linux enterprise high performance computing 15-ltss	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise high performance computing 15-ltss	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	linux enterprise high performance computing 15 sp1-espos	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise high performance computing 15 sp1-espos	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	linux enterprise high performance computing 15 sp1-ltss	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise high performance computing 15 sp1-ltss	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	linux enterprise high performance computing 15 sp2-espos	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise high performance computing 15 sp2-espos	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	linux enterprise high performance computing 15 sp2-ltss	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise high performance computing 15 sp2-ltss	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server 15-ltss	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise server 15-ltss	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server 15 sp1-bcl	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise server 15 sp1-bcl	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server 15 sp1-ltss	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise server 15 sp1-ltss	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server 15 sp2-bcl	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise server 15 sp2-bcl	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server 15 sp2-ltss	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise server 15 sp2-ltss	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server for sap applications 15	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise server for sap applications 15	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server for sap applications 15 sp1	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise server for sap applications 15 sp1	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server for sap applications 15 sp2	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise server for sap applications 15 sp2	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	manager proxy 4.1	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	manager proxy 4.1	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	manager retail branch server 4.1	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	manager retail branch server 4.1	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	manager server 4.1	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	manager server 4.1	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	enterprise storage 6	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	enterprise storage 6	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl	enterprise storage 7	`2.1.26-150000.5.13.1`	fixed
Suse	cyrus-sasl-saslauthd	enterprise storage 7	`2.1.26-150000.5.13.1`	fixed
Opensuse	cyrus-sasl	tumbleweed	`2.1.27-5.7`	fixed
Suse	cyrus-sasl	hpe helion openstack 8	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	openstack cloud 7	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	openstack cloud 8	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	openstack cloud 9	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	openstack cloud crowbar 8	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	openstack cloud crowbar 9	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server for sap applications 12 sp2	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server for sap applications 12 sp3	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server for sap applications 12 sp4	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	linux enterprise software development kit 12 sp5	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server 12 sp2-ltss	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server 12 sp2-bcl	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server 12 sp3-ltss	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server 12 sp3-bcl	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server 12 sp4-ltss	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server 12 sp5	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	linux enterprise server for sap applications 12 sp5	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	linux enterprise workstation extension 12 sp5	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl	enterprise storage 5	`2.1.26-8.13.1`	fixed
Suse	cyrus-sasl-openssl1	linux enterprise server 11-security	`2.1.22-182.26.4.1`	fixed
Suse	cyrus-sasl	linux enterprise point of sale 11 sp3	`2.1.22-182.26.4.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise point of sale 11 sp3	`2.1.22-182.26.4.1`	fixed
Suse	cyrus-sasl	linux enterprise server 11 sp4-ltss	`2.1.22-182.26.4.1`	fixed
Suse	cyrus-sasl-saslauthd	linux enterprise server 11 sp4-ltss	`2.1.22-182.26.4.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	cyrus-sasl2	source	sid	`2.1.27+dfsg-2`	not yet assigned	Not reported	[947043]
Debian	cyrus-sasl2	source	forky	`2.1.27+dfsg-2`	not yet assigned	Not reported	[947043]
Debian	cyrus-sasl2	source	trixie	`2.1.27+dfsg-2`	not yet assigned	Not reported	[947043]
Debian	cyrus-sasl2	source	bookworm	`2.1.27+dfsg-2`	not yet assigned	Not reported	[947043]
Cpe	cyrus-sasl	cpe	Not reported	`2.1.28`	Not reported	NVD-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.10	`2.1.27-r4`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.11	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.12	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.13	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.14	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.15	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.16	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.17	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.18	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.19	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.20	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.21	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.22	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.23	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.24	`2.1.27-r5`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.8	`2.1.26-r15`	Not reported	ALPINE-CVE-2019-19906	Not reported
Alpine	cyrus-sasl	apk	3.9	`2.1.27-r2`	Not reported	ALPINE-CVE-2019-19906	Not reported
Ubuntu	cyrus-sasl2	deb	pro	`2.1.25.dfsg1-17ubuntu0.1~esm1`	Not reported	USN-4256-1	Not reported
Ubuntu	cyrus-sasl2	deb	16.04	`2.1.26.dfsg1-14ubuntu0.2`	Not reported	USN-4256-1	Not reported
Ubuntu	cyrus-sasl2	deb	18.04	`2.1.27~101-g0780600+dfsg-3ubuntu2.1`	Not reported	USN-4256-1	Not reported
Ubuntu	cyrus-sasl2	deb	pro	`2.1.25.dfsg1-17ubuntu0.1~esm1`	Not reported	UBUNTU-CVE-2019-19906	Not reported
Ubuntu	cyrus-sasl2	deb	16.04	`2.1.26.dfsg1-14ubuntu0.2`	Not reported	UBUNTU-CVE-2019-19906	Not reported
Ubuntu	cyrus-sasl2	deb	18.04	`2.1.27~101-g0780600+dfsg-3ubuntu2.1`	Not reported	UBUNTU-CVE-2019-19906	Not reported
Suse	cyrus-sasl	rpm	linux enterprise high performance computing 15-espos	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise high performance computing 15-espos	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise high performance computing 15-ltss	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise high performance computing 15-ltss	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise high performance computing 15 sp1-espos	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise high performance computing 15 sp1-espos	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise high performance computing 15 sp1-ltss	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise high performance computing 15 sp1-ltss	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise high performance computing 15 sp2-espos	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise high performance computing 15 sp2-espos	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise high performance computing 15 sp2-ltss	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise high performance computing 15 sp2-ltss	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server 15-ltss	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise server 15-ltss	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server 15 sp1-bcl	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise server 15 sp1-bcl	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server 15 sp1-ltss	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise server 15 sp1-ltss	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server 15 sp2-bcl	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise server 15 sp2-bcl	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server 15 sp2-ltss	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise server 15 sp2-ltss	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server for sap applications 15	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise server for sap applications 15	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server for sap applications 15 sp1	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise server for sap applications 15 sp1	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server for sap applications 15 sp2	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise server for sap applications 15 sp2	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	manager proxy 4.1	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	manager proxy 4.1	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	manager retail branch server 4.1	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	manager retail branch server 4.1	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	manager server 4.1	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	manager server 4.1	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	enterprise storage 6	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	enterprise storage 6	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl	rpm	enterprise storage 7	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	enterprise storage 7	`2.1.26-150000.5.13.1`	Not reported	SUSE-SU-2022:3549-1	Not reported
Opensuse	cyrus-sasl	rpm	tumbleweed	`2.1.27-5.7`	Not reported	OPENSUSE-SU-2024:10709-1	Not reported
Suse	cyrus-sasl	rpm	hpe helion openstack 8	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	openstack cloud 7	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	openstack cloud 8	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	openstack cloud 9	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	openstack cloud crowbar 8	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	openstack cloud crowbar 9	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server for sap applications 12 sp2	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server for sap applications 12 sp3	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server for sap applications 12 sp4	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise software development kit 12 sp5	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server 12 sp2-ltss	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server 12 sp2-bcl	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server 12 sp3-ltss	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server 12 sp3-bcl	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server 12 sp4-ltss	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server 12 sp5	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server for sap applications 12 sp5	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise workstation extension 12 sp5	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl	rpm	enterprise storage 5	`2.1.26-8.13.1`	Not reported	SUSE-SU-2020:3939-1	Not reported
Suse	cyrus-sasl-openssl1	rpm	linux enterprise server 11-security	`2.1.22-182.26.4.1`	Not reported	SUSE-SU-2020:14579-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise point of sale 11 sp3	`2.1.22-182.26.4.1`	Not reported	SUSE-SU-2020:14579-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise point of sale 11 sp3	`2.1.22-182.26.4.1`	Not reported	SUSE-SU-2020:14579-1	Not reported
Suse	cyrus-sasl	rpm	linux enterprise server 11 sp4-ltss	`2.1.22-182.26.4.1`	Not reported	SUSE-SU-2020:14579-1	Not reported
Suse	cyrus-sasl-saslauthd	rpm	linux enterprise server 11 sp4-ltss	`2.1.22-182.26.4.1`	Not reported	SUSE-SU-2020:14579-1	Not reported

[Debian bug #947043]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[cyrus-sasl-32bit]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-crammd5]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-crammd5-32bit]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-devel]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-devel-32bit]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-digestmd5]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-digestmd5-32bit]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-gs2]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-gssapi]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-gssapi-32bit]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-ntlm]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-otp]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-otp-32bit]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-plain]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-plain-32bit]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[cyrus-sasl-scram]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[libsasl2-3]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed
[libsasl2-3-32bit]Unknown
Source package: [cyrus-sasl]
Details (1)
- 2.1.28-12.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.27-5.7
  Version impact unknown
  nvd · cyrus-sasl · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[cyrus-sasl2-doc]Fixed
Source package: [cyrus-sasl2]
Details (2)
- 2.1.28+dfsg-10 · all · bookworm
  Fixed · Fixed: 2.1.27+dfsg-2
  nvd · cyrus-sasl2 · debian · bookworm
- 2.1.28+dfsg-10 · all · bookworm
  Fixed · Fixed: 2.1.27+dfsg-2
  nvd · cyrus-sasl2 · debian · bookworm
[libsasl2-2]Fixed
Source package: [cyrus-sasl2]
Details (2)
- 2.1.28+dfsg-10 · amd64 · bookworm
  Fixed · Fixed: 2.1.27+dfsg-2
  nvd · cyrus-sasl2 · debian · bookworm
- 2.1.28+dfsg-10 · arm64 · bookworm
  Fixed · Fixed: 2.1.27+dfsg-2
  nvd · cyrus-sasl2 · debian · bookworm

Next results

Observed: Oct 23, 2026, 5:43:31 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]