发现 Cyrus SASL 未正确处理某些 LDAP 数据包。攻击者可能利用此问题执行任意代码或造成拒绝服务。

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动清理和排版。

移动设备上运行的 Apple iOS 版本低于 13.6。因此，该主机受到多个漏洞的影响。

According to the version of the cyrus-sasl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds     write leading to unauthenticated remote     denial-of-service in OpenLDAP via a malformed LDAP     packet. The OpenLDAP crash is ultimately caused by an     off-by-one error in _sasl_add_string in common.c in     cyrus-sasl.(CVE-2019-19906)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4497 advisory.

  - cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-     service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one     error in _sasl_add_string in common.c in cyrus-sasl. (CVE-2019-19906)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4497 advisory.

    The cyrus-sasl packages contain the Cyrus implementation of Simple Authentication and Security Layer     (SASL). SASL is a method for adding authentication support to connection-based protocols.

    Security Fix(es):

    * cyrus-sasl: denial of service in _sasl_add_string function (CVE-2019-19906)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the cyrus-sasl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - In GNU patch through 2.7.6, the following of symlinks     is mishandled in certain cases other than input files.
    This affects inp.c and util.c.(CVE-2019-19906)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2020:14579-1 advisory.

  - cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-     service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one     error in _sasl_add_string in common.c in cyrus-sasl. (CVE-2019-19906)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the cyrus-sasl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds     write leading to unauthenticated remote     denial-of-service in OpenLDAP via a malformed LDAP     packet. The OpenLDAP crash is ultimately caused by an     off-by-one error in _sasl_add_string in common.c in     cyrus-sasl.(CVE-2019-19906)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:4497 advisory.

  - cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-     service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one     error in _sasl_add_string in common.c in cyrus-sasl. (CVE-2019-19906)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4256-1 advisory.

    It was discovered that Cyrus SASL incorrectly handled certain LDAP packets. An attacker could possibly use     this issue to execute arbitrary code or cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 13.6. It is, therefore, affected by multiple vulnerabilities.

The remote NewStart CGSL host, running version MAIN 6.06, has cyrus-sasl packages installed that are affected by multiple vulnerabilities:

  - cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-     service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one     error in _sasl_add_string in common.c in cyrus-sasl. (CVE-2019-19906)

  - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL     INSERT or UPDATE statement. (CVE-2022-24407)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
133352	Ubuntu 16.04 LTS / 18.04 LTS：Cyrus SASL 漏洞 (USN-4256-1)	Nessus	Ubuntu Local Security Checks	2020/1/30	2024/8/27	high
138575	Apple iOS < 13.6 多个漏洞	Nessus	Mobile Devices	2020/7/17	2024/9/4	critical
137473	EulerOS 2.0 SP2 : cyrus-sasl (EulerOS-SA-2020-1631)	Nessus	Huawei Local Security Checks	2020/6/17	2024/3/7	high
142764	Oracle Linux 8 : cyrus-sasl (ELSA-2020-4497)	Nessus	Oracle Linux Local Security Checks	2020/11/12	2024/2/9	high
142428	RHEL 8 : cyrus-sasl (RHSA-2020:4497)	Nessus	Red Hat Local Security Checks	2020/11/4	2024/6/4	high
135123	EulerOS Virtualization for ARM 64 3.0.6.0 : cyrus-sasl (EulerOS-SA-2020-1336)	Nessus	Huawei Local Security Checks	2020/4/2	2024/3/20	high
133979	EulerOS 2.0 SP8 : cyrus-sasl (EulerOS-SA-2020-1145)	Nessus	Huawei Local Security Checks	2020/2/25	2024/3/26	high
150549	SUSE SLES11 Security Update : cyrus-sasl (SUSE-SU-2020:14579-1)	Nessus	SuSE Local Security Checks	2021/6/10	2023/12/26	high
151331	EulerOS Virtualization for ARM 64 3.0.2.0 : cyrus-sasl (EulerOS-SA-2021-2081)	Nessus	Huawei Local Security Checks	2021/7/2	2023/12/11	high
184648	Rocky Linux 8 : cyrus-sasl (RLSA-2020:4497)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	high
133352	Ubuntu 16.04 LTS / 18.04 LTS : Cyrus SASL vulnerability (USN-4256-1)	Nessus	Ubuntu Local Security Checks	2020/1/30	2024/8/27	high
138575	Apple iOS < 13.6 Multiple Vulnerabilities	Nessus	Mobile Devices	2020/7/17	2024/9/4	critical
187355	NewStart CGSL MAIN 6.06 : cyrus-sasl Multiple Vulnerabilities (NS-SA-2023-0087)	Nessus	NewStart CGSL Local Security Checks	2023/12/27	2023/12/27	high

検出

プラグインの検索

high

critical

high

high

high

high

high

high

high

high

high

critical

high