USN-4256-1: Cyrus SASL vulnerability
It was discovered that Cyrus SASL incorrectly handled certain LDAP packets. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libsasl2-2to a version that resolves this vulnerability.Fixed in 2.1.27+dfsg-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/libsasl2-2to a version that resolves this vulnerability.Fixed in 2.1.27~101-g0780600+dfsg-3ubuntu2.1 - Upgrade
Upgrade
ubuntu/libsasl2-2to a version that resolves this vulnerability.Fixed in 2.1.26.dfsg1-14ubuntu0.2 - Upgrade
Upgrade
ubuntu/libsasl2-2to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/libsasl2-2to a version that resolves this vulnerability.Fixed in 2.1.25.dfsg1-3ubuntu0.2
Event History
Frequently Asked Questions
What is the severity of USN-4256-1?
The vulnerability USN-4256-1 has a high severity as it allows for potential arbitrary code execution or denial of service.
How do I fix USN-4256-1?
To fix USN-4256-1, upgrade the libsasl2-2 package to the recommended versions listed in the advisory.
Which Ubuntu versions are affected by USN-4256-1?
USN-4256-1 affects Ubuntu 19.10, 18.04, 16.04, 14.04, and 12.04.
What components are impacted by USN-4256-1?
The USN-4256-1 vulnerability specifically affects the Cyrus SASL implementation found in the libsasl2-2 package.
Can USN-4256-1 be exploited remotely?
Yes, an attacker could exploit the USN-4256-1 vulnerability remotely through crafted LDAP packets.