Debian/cyrus-sasl2: unknown
Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers
Action: Upgrade cyrus-sasl2 to 2.1.26.dfsg1-14 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.26.dfsg1-14 | - |
Fixed versions
| 2.1.26.dfsg1-14 |
Sources
- osv: DEBIAN-CVE-2013-4122#Debian:13/cyrus-sasl2
- https://security-tracker.debian.org/tracker/CVE-2013-4122
published · modified · JSON