cyrus-sasl vulnerabilities

CVEs whose affected-version data names the cyrus-sasl package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-107161High· 7.5

today

A heap-based buffer overflow flaw was found in Cyrus SASL

A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not …

▾ TwilightRed Hat · cyrus-saslvia NVD