Security Advisory

CVE-2019-19906

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-12-19 17:39:13

Last updated 2024-08-05 02:32:09

Assigner mitre

State PUBLISHED

Description

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.

← Browse all CVEs View on cve.org ↗