Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-24407HistoryFeb 24, 2022 - 3:15 p.m.
CVE-2022-24407
2022-02-2415:15:29
Debian Security Bug Tracker
security-tracker.debian.org
58
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
69.2%
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | cyrus-sasl2 | < 2.1.28+dfsg-2 | cyrus-sasl2_2.1.28+dfsg-2_all.deb |
| Debian | 11 | all | cyrus-sasl2 | < 2.1.27+dfsg-2.1+deb11u1 | cyrus-sasl2_2.1.27+dfsg-2.1+deb11u1_all.deb |
| Debian | 10 | all | cyrus-sasl2 | < 2.1.27+dfsg-1+deb10u2 | cyrus-sasl2_2.1.27+dfsg-1+deb10u2_all.deb |
| Debian | 999 | all | cyrus-sasl2 | < 2.1.28+dfsg-2 | cyrus-sasl2_2.1.28+dfsg-2_all.deb |
| Debian | 13 | all | cyrus-sasl2 | < 2.1.28+dfsg-2 | cyrus-sasl2_2.1.28+dfsg-2_all.deb |
Related
nessus
nessus
RHEL 8 : cyrus-sasl (RHSA-2022:0730)
2022-03-03 00:00:00
Oracle Linux 6 : cyrus-sasl (ELSA-2022-9239)
2022-03-21 00:00:00
EulerOS Virtualization 3.0.2.0 : cyrus-sasl (EulerOS-SA-2023-1694)
2023-05-07 00:00:00
mageia
mageia
Updated cyrus-sasl packages fix security vulnerability
2022-03-23 11:36:28
Updated mysql-connector-c++ packages fix security vulnerability
2023-03-19 01:16:28
cbl_mariner
cbl_mariner
CVE-2022-24407 affecting package cyrus-sasl 2.1.27-4
2022-03-19 16:40:52
CVE-2022-24407 affecting package cyrus-sasl for versions less than 2.1.28-1
2022-04-09 06:51:52
openvas
openvas
Debian: Security Advisory (DSA-5087-1)
2022-03-02 00:00:00
Huawei EulerOS: Security Advisory for cyrus-sasl (EulerOS-SA-2022-1802)
2022-06-07 00:00:00
Huawei EulerOS: Security Advisory for cyrus-sasl (EulerOS-SA-2022-2552)
2022-10-12 00:00:00
osv
osv
cyrus-sasl2 - security update
2022-03-06 00:00:00
Important: cyrus-sasl security update
2022-02-23 13:33:12
CVE-2022-24407
2022-02-24 15:15:29
gitlab
gitlab
fedora
fedora
[SECURITY] Fedora 34 Update: cyrus-sasl-2.1.27-9.fc34
2022-03-09 19:16:13
[SECURITY] Fedora 36 Update: cyrus-sasl-2.1.27-18.fc36
2022-03-26 15:32:19
[SECURITY] Fedora 35 Update: cyrus-sasl-2.1.27-14.fc35
2022-03-08 21:23:02
rocky
rocky
cyrus-sasl security update
2022-02-23 13:33:12
oraclelinux
oraclelinux
cyrus-sasl security update
2022-02-24 00:00:00
cyrus-sasl security update
2022-03-21 00:00:00
cyrus-sasl security update
2022-02-24 00:00:00
redhatcve
redhatcve
CVE-2022-24407
2022-02-23 09:22:54
redhat
redhat
(RHSA-2022:0658) Important: cyrus-sasl security update
2022-02-23 13:33:12
(RHSA-2022:0668) Important: cyrus-sasl security update
2022-02-24 09:24:22
(RHSA-2022:0666) Important: cyrus-sasl security update
2022-02-24 09:24:18
amazon
amazon
Important: cyrus-sasl
2022-03-10 00:54:00
Important: cyrus-sasl
2022-03-07 23:29:00
ubuntucve
ubuntucve
CVE-2022-24407
2022-02-22 00:00:00
centos
centos
cyrus security update
2022-02-25 15:31:36
suse
suse
Security update for cyrus-sasl (important)
2022-03-08 00:00:00
cvelist
cvelist
CVE-2022-24407
2022-02-23 00:00:00
nvd
nvd
CVE-2022-24407
2022-02-24 15:15:29
f5
f5
K82896488 : Cyrus SASL vulnerability CVE-2022-24407
2022-05-18 00:00:00
redos
redos
ROS-20220309-01
2022-03-09 00:00:00
alpinelinux
alpinelinux
CVE-2022-24407
2022-02-24 15:15:29
freebsd
freebsd
cyrus-sasl -- Escape password for SQL insert/update commands
2022-02-04 00:00:00
MySQL -- Multiple vulnerabilities
2023-01-20 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2022-24407
2022-02-28 15:06:37
debian
debian
[SECURITY] [DSA 5087-1] cyrus-sasl2 security update
2022-02-25 22:25:06
[SECURITY] [DLA 2931-1] cyrus-sasl2 security update
2022-03-06 17:15:21
ibm
ibm
almalinux
almalinux
Important: cyrus-sasl security update
2022-02-23 13:33:12
prion
prion
Default credentials
2022-02-24 15:15:00
cve
cve
CVE-2022-24407
2022-02-24 15:15:29
cloudfoundry
cloudfoundry
USN-5301-1: Cyrus SASL vulnerability | Cloud Foundry
2022-04-21 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2022-03-12 00:42:04
ubuntu
ubuntu
Cyrus SASL vulnerability
2022-02-22 00:00:00
Cyrus SASL vulnerability
2022-02-22 00:00:00
slackware
slackware
[slackware-security] cyrus-sasl
2022-02-25 00:10:10
photon
photon
Important Photon OS Security Update - PHSA-2022-0368
2022-03-04 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0368
2022-03-08 00:00:00
Important Photon OS Security Update - PHSA-2022-0477
2022-03-04 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
69.2%
Related for DEBIANCVE:CVE-2022-24407