CVE catalog

CVE-2026-107161

A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.34% · Oct 25, 2026

A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting (escaping special characters) makes the value longer. The under-sized buffer is then passed to strcat(), causing a heap-based out-of-bounds write whose size depends on attacker-controlled input. A malicious or on-path DIGEST-MD5 (or HTTP Digest) server can trigger this flaw in a connecting client by supplying a crafted challenge field, such as realm or nonce, most likely resulting in a crash of the client application.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiancyrus-sasl2sid2.1.28+dfsg1-12fixed
Debiancyrus-sasl2forky2.1.28+dfsg1-12fixed
Debiancyrus-sasl2trixie2.1.28+dfsg1-9vulnerable
Debiancyrus-sasl2bookworm2.1.28+dfsg-10vulnerable
Opensusecyrus-sasltumbleweed2.1.28-13.1fixed
Susecyrus-sasllinux enterprise micro 5.32.1.27-150300.4.9.1fixed
Susecyrus-sasllinux enterprise micro 5.42.1.27-150300.4.9.1fixed
Susecyrus-sasllinux enterprise high performance computing 15 sp4-espos2.1.27-150300.4.9.1fixed
Susecyrus-sasl-bdblinux enterprise high performance computing 15 sp4-espos2.1.27-150300.4.9.1fixed
Susecyrus-sasl-saslauthdlinux enterprise high performance computing 15 sp4-espos2.1.27-150300.4.9.1fixed
Susecyrus-sasl-saslauthd-bdblinux enterprise high performance computing 15 sp4-espos2.1.27-150300.4.9.1fixed
Susecyrus-sasllinux enterprise high performance computing 15 sp4-ltss2.1.27-150300.4.9.1fixed
Susecyrus-sasl-bdblinux enterprise high performance computing 15 sp4-ltss2.1.27-150300.4.9.1fixed
Susecyrus-sasl-saslauthdlinux enterprise high performance computing 15 sp4-ltss2.1.27-150300.4.9.1fixed
Susecyrus-sasl-saslauthd-bdblinux enterprise high performance computing 15 sp4-ltss2.1.27-150300.4.9.1fixed
Susecyrus-sasllinux enterprise server 15 sp4-ltss2.1.27-150300.4.9.1fixed
Susecyrus-sasl-bdblinux enterprise server 15 sp4-ltss2.1.27-150300.4.9.1fixed
Susecyrus-sasl-saslauthdlinux enterprise server 15 sp4-ltss2.1.27-150300.4.9.1fixed
Susecyrus-sasl-saslauthd-bdblinux enterprise server 15 sp4-ltss2.1.27-150300.4.9.1fixed
Susecyrus-sasllinux enterprise server for sap applications 15 sp42.1.27-150300.4.9.1fixed
Susecyrus-sasl-bdblinux enterprise server for sap applications 15 sp42.1.27-150300.4.9.1fixed
Susecyrus-sasl-saslauthdlinux enterprise server for sap applications 15 sp42.1.27-150300.4.9.1fixed
Susecyrus-sasl-saslauthd-bdblinux enterprise server for sap applications 15 sp42.1.27-150300.4.9.1fixed
Susecyrus-sasllinux enterprise server 12 sp5-ltss2.1.26-14.10.1fixed
Susecyrus-sasl-saslauthdlinux enterprise server 12 sp5-ltss2.1.26-14.10.1fixed
Susecyrus-sasllinux enterprise server ltss extended security 12 sp52.1.26-14.10.1fixed
Susecyrus-sasl-saslauthdlinux enterprise server ltss extended security 12 sp52.1.26-14.10.1fixed
Susecyrus-sasllinux enterprise micro 5.52.1.28-150500.3.12.1fixed
Susecyrus-sasllinux enterprise high performance computing 15 sp5-espos2.1.28-150500.3.12.1fixed
Susecyrus-sasl-bdblinux enterprise high performance computing 15 sp5-espos2.1.28-150500.3.12.1fixed
Susecyrus-sasl-saslauthdlinux enterprise high performance computing 15 sp5-espos2.1.28-150500.3.12.1fixed
Susecyrus-sasllinux enterprise high performance computing 15 sp5-ltss2.1.28-150500.3.12.1fixed
Susecyrus-sasl-bdblinux enterprise high performance computing 15 sp5-ltss2.1.28-150500.3.12.1fixed
Susecyrus-sasl-saslauthdlinux enterprise high performance computing 15 sp5-ltss2.1.28-150500.3.12.1fixed
Susecyrus-sasllinux enterprise server 15 sp5-ltss2.1.28-150500.3.12.1fixed
Susecyrus-sasl-bdblinux enterprise server 15 sp5-ltss2.1.28-150500.3.12.1fixed
Susecyrus-sasl-saslauthdlinux enterprise server 15 sp5-ltss2.1.28-150500.3.12.1fixed
Susecyrus-sasl-saslauthd-bdblinux enterprise server 15 sp5-ltss2.1.28-150500.3.12.1fixed
Susecyrus-sasllinux enterprise server for sap applications 15 sp52.1.28-150500.3.12.1fixed
Susecyrus-sasl-bdblinux enterprise server for sap applications 15 sp52.1.28-150500.3.12.1fixed
Susecyrus-sasl-saslauthdlinux enterprise server for sap applications 15 sp52.1.28-150500.3.12.1fixed
Susecyrus-sasl-saslauthd-bdblinux enterprise server for sap applications 15 sp52.1.28-150500.3.12.1fixed
Opensusecyrus-saslleap 16.02.1.28-160000.4.1fixed
Opensusecyrus-sasl-bdbleap 16.02.1.28-160000.4.1fixed
Opensusecyrus-sasl-saslauthdleap 16.02.1.28-160000.4.1fixed
Opensusecyrus-sasl-saslauthd-bdbleap 16.02.1.28-160000.4.1fixed
Susecyrus-sasllinux enterprise server 16.02.1.28-160000.4.1fixed
Susecyrus-sasl-saslauthdlinux enterprise server 16.02.1.28-160000.4.1fixed
Susecyrus-sasllinux enterprise server for sap applications 16.02.1.28-160000.4.1fixed
Susecyrus-sasl-saslauthdlinux enterprise server for sap applications 16.02.1.28-160000.4.1fixed
Susecyrus-sasllinux enterprise module for basesystem 15 sp72.1.28-150600.7.17.1fixed
Susecyrus-sasl-saslauthdlinux enterprise module for basesystem 15 sp72.1.28-150600.7.17.1fixed
Susecyrus-sasl-bdblinux enterprise module for legacy 15 sp72.1.28-150600.7.17.1fixed
Susecyrus-sasl-saslauthd-bdblinux enterprise module for legacy 15 sp72.1.28-150600.7.17.1fixed
Susecyrus-sasl-bdblinux enterprise module for server applications 15 sp72.1.28-150600.7.17.1fixed
Susecyrus-sasl-saslauthdlinux enterprise module for server applications 15 sp72.1.28-150600.7.17.1fixed
Susecyrus-sasllinux enterprise server 15 sp6-ltss2.1.28-150600.7.17.1fixed
Susecyrus-sasl-bdblinux enterprise server 15 sp6-ltss2.1.28-150600.7.17.1fixed
Susecyrus-sasl-saslauthdlinux enterprise server 15 sp6-ltss2.1.28-150600.7.17.1fixed
Susecyrus-sasl-saslauthd-bdblinux enterprise server 15 sp6-ltss2.1.28-150600.7.17.1fixed
Susecyrus-sasllinux enterprise server for sap applications 15 sp62.1.28-150600.7.17.1fixed
Susecyrus-sasl-bdblinux enterprise server for sap applications 15 sp62.1.28-150600.7.17.1fixed
Susecyrus-sasl-saslauthdlinux enterprise server for sap applications 15 sp62.1.28-150600.7.17.1fixed
Susecyrus-sasl-saslauthd-bdblinux enterprise server for sap applications 15 sp62.1.28-150600.7.17.1fixed
Susecyrus-sasllinux micro 6.12.1.28-slfo.1.1_2.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiancyrus-sasl2sourcesid2.1.28+dfsg1-12not yet assignedNot reported[1150516]
Debiancyrus-sasl2sourceforky2.1.28+dfsg1-12not yet assignedNot reported[1150516]
Debiancyrus-sasl2sourcetrixie(unfixed)not yet assignedNot reported[1150516]
Debiancyrus-sasl2sourcebookworm(unfixed)not yet assignedNot reported[1150516]
Opensusecyrus-saslrpmtumbleweed2.1.28-13.1Not reportedOPENSUSE-SU-2026:12099-1Not reported
Susecyrus-saslrpmlinux enterprise micro 5.32.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-saslrpmlinux enterprise micro 5.42.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-saslrpmlinux enterprise high performance computing 15 sp4-espos2.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-sasl-bdbrpmlinux enterprise high performance computing 15 sp4-espos2.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise high performance computing 15 sp4-espos2.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-sasl-saslauthd-bdbrpmlinux enterprise high performance computing 15 sp4-espos2.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-saslrpmlinux enterprise high performance computing 15 sp4-ltss2.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-sasl-bdbrpmlinux enterprise high performance computing 15 sp4-ltss2.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise high performance computing 15 sp4-ltss2.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-sasl-saslauthd-bdbrpmlinux enterprise high performance computing 15 sp4-ltss2.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-saslrpmlinux enterprise server 15 sp4-ltss2.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-sasl-bdbrpmlinux enterprise server 15 sp4-ltss2.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise server 15 sp4-ltss2.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-sasl-saslauthd-bdbrpmlinux enterprise server 15 sp4-ltss2.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-saslrpmlinux enterprise server for sap applications 15 sp42.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-sasl-bdbrpmlinux enterprise server for sap applications 15 sp42.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise server for sap applications 15 sp42.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-sasl-saslauthd-bdbrpmlinux enterprise server for sap applications 15 sp42.1.27-150300.4.9.1Not reportedSUSE-SU-2026:4802-1Not reported
Susecyrus-saslrpmlinux enterprise server 12 sp5-ltss2.1.26-14.10.1Not reportedSUSE-SU-2026:4795-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise server 12 sp5-ltss2.1.26-14.10.1Not reportedSUSE-SU-2026:4795-1Not reported
Susecyrus-saslrpmlinux enterprise server ltss extended security 12 sp52.1.26-14.10.1Not reportedSUSE-SU-2026:4795-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise server ltss extended security 12 sp52.1.26-14.10.1Not reportedSUSE-SU-2026:4795-1Not reported
Susecyrus-saslrpmlinux enterprise micro 5.52.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-saslrpmlinux enterprise high performance computing 15 sp5-espos2.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-sasl-bdbrpmlinux enterprise high performance computing 15 sp5-espos2.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise high performance computing 15 sp5-espos2.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-saslrpmlinux enterprise high performance computing 15 sp5-ltss2.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-sasl-bdbrpmlinux enterprise high performance computing 15 sp5-ltss2.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise high performance computing 15 sp5-ltss2.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-saslrpmlinux enterprise server 15 sp5-ltss2.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-sasl-bdbrpmlinux enterprise server 15 sp5-ltss2.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise server 15 sp5-ltss2.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-sasl-saslauthd-bdbrpmlinux enterprise server 15 sp5-ltss2.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-saslrpmlinux enterprise server for sap applications 15 sp52.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-sasl-bdbrpmlinux enterprise server for sap applications 15 sp52.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise server for sap applications 15 sp52.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Susecyrus-sasl-saslauthd-bdbrpmlinux enterprise server for sap applications 15 sp52.1.28-150500.3.12.1Not reportedSUSE-SU-2026:4817-1Not reported
Opensusecyrus-saslrpmleap 16.02.1.28-160000.4.1Not reportedOPENSUSE-SU-2026:22146-1Not reported
Opensusecyrus-sasl-bdbrpmleap 16.02.1.28-160000.4.1Not reportedOPENSUSE-SU-2026:22146-1Not reported
Opensusecyrus-sasl-saslauthdrpmleap 16.02.1.28-160000.4.1Not reportedOPENSUSE-SU-2026:22146-1Not reported
Opensusecyrus-sasl-saslauthd-bdbrpmleap 16.02.1.28-160000.4.1Not reportedOPENSUSE-SU-2026:22146-1Not reported
Susecyrus-saslrpmlinux enterprise server 16.02.1.28-160000.4.1Not reportedSUSE-SU-2026:24266-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise server 16.02.1.28-160000.4.1Not reportedSUSE-SU-2026:24266-1Not reported
Susecyrus-saslrpmlinux enterprise server for sap applications 16.02.1.28-160000.4.1Not reportedSUSE-SU-2026:24266-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise server for sap applications 16.02.1.28-160000.4.1Not reportedSUSE-SU-2026:24266-1Not reported
Susecyrus-saslrpmlinux enterprise module for basesystem 15 sp72.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise module for basesystem 15 sp72.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-sasl-bdbrpmlinux enterprise module for legacy 15 sp72.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-sasl-saslauthd-bdbrpmlinux enterprise module for legacy 15 sp72.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-sasl-bdbrpmlinux enterprise module for server applications 15 sp72.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise module for server applications 15 sp72.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-saslrpmlinux enterprise server 15 sp6-ltss2.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-sasl-bdbrpmlinux enterprise server 15 sp6-ltss2.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise server 15 sp6-ltss2.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-sasl-saslauthd-bdbrpmlinux enterprise server 15 sp6-ltss2.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-saslrpmlinux enterprise server for sap applications 15 sp62.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-sasl-bdbrpmlinux enterprise server for sap applications 15 sp62.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-sasl-saslauthdrpmlinux enterprise server for sap applications 15 sp62.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-sasl-saslauthd-bdbrpmlinux enterprise server for sap applications 15 sp62.1.28-150600.7.17.1Not reportedSUSE-SU-2026:4836-1Not reported
Susecyrus-saslrpmlinux micro 6.12.1.28-slfo.1.1_2.1Not reportedSUSE-SU-2026:24380-1Not reported

[Debian bug #1150516]

Notes

[trixie] cyrus-sasl2: Will be fixed via point release; suggested patch taken for update

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [cyrus-sasl2-doc]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg-10 · all · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

    • 2.1.28+dfsg-10 · all · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

  • [libsasl2-2]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg-10 · amd64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

    • 2.1.28+dfsg-10 · arm64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

  • [libsasl2-dev]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg-10 · amd64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

    • 2.1.28+dfsg-10 · arm64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

  • [libsasl2-modules]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg-10 · amd64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

    • 2.1.28+dfsg-10 · arm64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

  • [libsasl2-modules-db]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg-10 · amd64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

    • 2.1.28+dfsg-10 · arm64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

  • [libsasl2-modules-gssapi-heimdal]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg-10 · amd64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

    • 2.1.28+dfsg-10 · arm64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

  • [libsasl2-modules-gssapi-mit]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg-10 · amd64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

    • 2.1.28+dfsg-10 · arm64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

  • [libsasl2-modules-ldap]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg-10 · amd64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

    • 2.1.28+dfsg-10 · arm64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

  • [libsasl2-modules-otp]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg-10 · amd64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

    • 2.1.28+dfsg-10 · arm64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

  • [libsasl2-modules-sql]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg-10 · amd64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

    • 2.1.28+dfsg-10 · arm64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

  • [sasl2-bin]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg-10 · amd64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

    • 2.1.28+dfsg-10 · arm64 · bookworm

      Affected

      nvd · cyrus-sasl2 · debian · bookworm; nvd · cyrus-sasl2 · debian · 12

[Debian 13 (Trixie)]

  • [cyrus-sasl2-doc]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg1-9 · all · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

    • 2.1.28+dfsg1-9 · all · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

  • [libsasl2-2]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg1-9 · amd64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

    • 2.1.28+dfsg1-9 · arm64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

  • [libsasl2-dev]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg1-9 · amd64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

    • 2.1.28+dfsg1-9 · arm64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

  • [libsasl2-modules]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg1-9 · amd64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

    • 2.1.28+dfsg1-9 · arm64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

  • [libsasl2-modules-db]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg1-9 · amd64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

    • 2.1.28+dfsg1-9 · arm64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

  • [libsasl2-modules-gssapi-heimdal]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg1-9 · amd64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

    • 2.1.28+dfsg1-9 · arm64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

  • [libsasl2-modules-gssapi-mit]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg1-9 · amd64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

    • 2.1.28+dfsg1-9 · arm64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

  • [libsasl2-modules-ldap]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg1-9 · amd64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

    • 2.1.28+dfsg1-9 · arm64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

  • [libsasl2-modules-otp]Affected

    Source package: [cyrus-sasl2]

    Details (2)

    • 2.1.28+dfsg1-9 · amd64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

    • 2.1.28+dfsg1-9 · arm64 · trixie

      Affected

      nvd · cyrus-sasl2 · debian · 13

Next results

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]