Approved changes feed: RSS · Atom

cpe:2.3:a:cyrus:sasl:2.1.19:*:*:*:*:*:*:*

part: a version: 2.1.19 update: *

VendorCyrus (398f2f03-5710-57d5-96a2-c3e12b39a20b)
ProductSasl (67a538ac-cc4c-51bc-b981-a369103a56fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cyrus-sasl2 purl2cpe 2026-06-01 10:15:33.650137
pkg:deb/ubuntu/cyrus-sasl2 purl2cpe 2026-06-01 10:15:33.650139
pkg:docker/ibmcom/cyrus-sasl purl2cpe 2026-06-01 10:15:33.650141
pkg:github/cyrusimap/cyrus-sasl purl2cpe 2026-06-01 10:15:33.650142
pkg:gitlab/redhat/cyrus-sasl purl2cpe 2026-06-01 10:15:33.650143
pkg:golang/github.com/cyrusimap/cyrus-sasl purl2cpe 2026-06-01 10:15:33.650145
pkg:rpm/fedora/cyrus-sasl purl2cpe 2026-06-01 10:15:33.650146
pkg:rpm/opensuse/cyrus-sasl purl2cpe 2026-06-01 10:15:33.650147

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1721 vulnerable 2026-06-08 04:48:57.891340 Details available
digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.
Published: 2006-04-11T23:00:00.000Z
Updated: 2024-08-07T17:19:49.412Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.