CVE-2019-19906High· 7.5▾ Twilightcyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 1.6 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
8.0%
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
cyrus-sasl < 2.1.28debian_linux = 8.0debian_linux = 9.0debian_linux = 10.0ubuntu_linux = 12.04ubuntu_linux = 14.04ubuntu_linux = 16.04ubuntu_linux = 18.04ubuntu_linux = 19.10fedora = 31fedora = 32jboss_enterprise_web_server = 2.0.0mac_os_x = 10.14.6enterprise_linux = 5.0enterprise_linux = 6.0enterprise_linux = 7.0enterprise_linux = 8.0enterprise_linux_eus = 8.4enterprise_linux_for_ibm_z_systems = 8.0enterprise_linux_for_ibm_z_systems_eus = 8.4enterprise_linux_for_power_little_endian = 8.0enterprise_linux_for_power_little_endian_eus = 8.4enterprise_linux_server_aus = 8.4enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions = 8.4enterprise_linux_server_tus = 8.4enterprise_linux_server_update_services_for_sap_solutions = 8.4ipados = 13.6iphone_os = 13.6mac_os_x < 10.13.6mac_os_x >= 10.13.0, < 10.13.6mac_os_x >= 10.15.0, < 10.15.6mac_os_x = 10.13.6bookkeeper = 4.12.1Upgrade past the affected range:
cyrus-sasl 2.1.28mac_os_x 10.15.6Connected by shared product, vendor, weakness, or advisory.
CVE-2026-107161High· 7.5A heap-based buffer overflow flaw was found in Cyrus SASL
CVE-2018-14567Medium· 6.5libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-803…
CVE-2026-83600Medium· 6.5Netdata is an open source observability tool
CVE-2026-63387High· 7.0Libevent is an event notification library
CVE-2026-81738Low· 2.3OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries
CVE-2021-46848Critical· 9.1GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.