A NULL pointer dereference in Cyrus-SASL may allow remote attackers to cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/cyrus-sasl | * | < 2.1.26-r3 | >= 2.1.26-r3 |
Cyrus-SASL is an implementation of the Simple Authentication and Security Layer.
In the GNU C Library (glibc) from version 2.17 onwards, the crypt() function call can return NULL when the salt violates specifications or the system is in FIPS-140 mode and a DES or MD5 hashed password is passed. When Cyrus-SASL’s authentication mechanisms call crypt(), a NULL may be returned.
A remote attacker could trigger this vulnerability to cause a Denial of Service condition.
There is no known workaround at this time.
All Cyrus-SASL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/cyrus-sasl-2.1.26-r3"
A buffer overflow in Cyrus-SASL might allow for the execution of arbitrary code in applications or daemons that authenticate using SASL.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/cyrus-sasl | * | < 2.1.23 | >= 2.1.23 |
Cyrus-SASL is an implementation of the Simple Authentication and Security Layer.
James Ralston reported that in certain situations, Cyrus-SASL does not properly terminate strings which can result in buffer overflows when performing Base64 encoding.
A remote unauthenticated user might send specially crafted packets to a daemon using Cyrus-SASL, possibly resulting in the execution of arbitrary code with the privileges of the user running the daemon or a Denial of Service.
There is no known workaround at this time.
All Cyrus-SASL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/cyrus-sasl-2.1.23"
Cyrus-SASL contains a vulnerability in the DIGEST-MD5 process that could lead to a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/cyrus-sasl | * | < 2.1.21-r2 | >= 2.1.21-r2 |
Cyrus-SASL is an implementation of the Simple Authentication and Security Layer.
Cyrus-SASL contains an unspecified vulnerability in the DIGEST-MD5 process that could lead to a Denial of Service.
An attacker could possibly exploit this vulnerability by sending specially crafted data stream to the Cyrus-SASL server, resulting in a Denial of Service even if the attacker is not able to authenticate.
There is no known workaround at this time.
All Cyrus-SASL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/cyrus-sasl-2.1.21-r2"
Cyrus-SASL contains two vulnerabilities that might allow an attacker to completely compromise the vulnerable system.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/cyrus-sasl | * | <= 2.1.18-r1 | >= 2.1.18-r2 |
Cyrus-SASL is an implementation of the Simple Authentication and Security Layer.
Cyrus-SASL contains a remote buffer overflow in the digestmda5.c file. Additionally, under certain conditions it is possible for a local user to exploit a vulnerability in the way the SASL_PATH environment variable is honored (CAN-2004-0884).
An attacker might be able to execute arbitrary code with the Effective ID of the application calling the Cyrus-SASL libraries.
There is no known workaround at this time.
All Cyrus-SASL users should upgrade to the latest stable version:
# emerge sync # emerge -pv ">=dev-libs/cyrus-sasl-2.1.18-r2" # emerge ">=dev-libs/cyrus-sasl-2.1.18-r2"