DSA-4591: -1 cyrus-sasl2 -- security update
Published Dec 20, 2019
·Updated
cyrus-sasl2 - security update
Other sources
Stephan Zeisberg reported an out-of-bounds write vulnerability in the sasladdstring() function in cyrus-sasl2, a library implementing the Simple Authentication and Security Layer. A remote attacker can take advantage of this issue to cause denial-of-service conditions for applications using the library.
Affected Software
2 affected components
debian/cyrus-sasl2
debian/cyrus-sasl2
Event History
Dec 20, 2019
Advisory Published
12:00 AM