CVE Feed

    Dashboard / CVE / CVE-2019-19906

    CVE-2019-19906

    cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.

    Published:Nov 28, 2019
    Last Modified:Nov 21, 2024
    EPS:Dec 19, 2019
    EPSS Score:0.00168
    CVSS Score:7.5

    Affected Products

    Vendor
    Apache
    Product
    Bookkeeper
    Vendor
    Apple
    Product
    Ipados
    Vendor
    Apple
    Product
    Iphone Os
    Vendor
    Apple
    Product
    Mac Os X
    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Centos
    Product
    Centos
    Vendor
    Cyrusimap
    Product
    Cyrus-sasl
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Fedoraproject
    Product
    Fedora
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Ibm Z Systems
    Vendor
    Redhat
    Product
    Enterprise Linux For Ibm Z Systems Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Power Little Endian
    Vendor
    Redhat
    Product
    Enterprise Linux For Power Little Endian Eus
    Vendor
    Redhat
    Product
    Enterprise Linux Server Aus
    Vendor
    Redhat
    Product
    Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
    Vendor
    Redhat
    Product
    Enterprise Linux Server Tus
    Vendor
    Redhat
    Product
    Enterprise Linux Server Update Services For Sap Solutions
    Vendor
    Redhat
    Product
    Jboss Enterprise Web Server

    Exploits

    https://www.openldap.org/its/index.cgi/Incoming?id=9123https://www.openldap.org/its/index.cgi/Incoming?id=9123

    Related CVEs

    CVE-2022-32531 (CVSS 5.9) — The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkee…
    CVE-2020-23922 (CVSS 7.1) — An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read…
    CVE-2020-36230 (CVSS 7.5) — A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsi…
    CVE-2019-19924 (CVSS 5.3) — SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is ca…
    CVE-2019-17571 (CVSS 9.8) — Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which ca…
    CVE-2017-6891 (CVSS 8.8) — Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be ex…

    References

    http://seclists.org/fulldisclosure/2020/Jul/23
    http://seclists.org/fulldisclosure/2020/Jul/24
    http://www.openwall.com/lists/oss-security/2022/02/23/4
    https://github.com/cyrusimap/cyrus-sasl/issues/587
    https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
    https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
    https://lists.debian.org/debian-lts-announce/2019/12/msg00027.html
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MW6GZCLECGL2PBNHVNPJIX4RPVRVFR7R/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OB4GSVOJ6ESHQNT5GSV63OX5D4KPSTGT/
    https://seclists.org/bugtraq/2019/Dec/42
    https://support.apple.com/kb/HT211288
    https://support.apple.com/kb/HT211289
    https://usn.ubuntu.com/4256-1/
    https://www.debian.org/security/2019/dsa-4591
    https://www.openldap.org/its/index.cgi/Incoming?id=9123
    http://seclists.org/fulldisclosure/2020/Jul/23
    http://seclists.org/fulldisclosure/2020/Jul/24
    http://www.openwall.com/lists/oss-security/2022/02/23/4
    https://github.com/cyrusimap/cyrus-sasl/issues/587
    https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
    https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
    https://lists.debian.org/debian-lts-announce/2019/12/msg00027.html
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MW6GZCLECGL2PBNHVNPJIX4RPVRVFR7R/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OB4GSVOJ6ESHQNT5GSV63OX5D4KPSTGT/
    https://seclists.org/bugtraq/2019/Dec/42
    https://support.apple.com/kb/HT211288
    https://support.apple.com/kb/HT211289
    https://usn.ubuntu.com/4256-1/
    https://www.debian.org/security/2019/dsa-4591
    https://www.openldap.org/its/index.cgi/Incoming?id=9123

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High