CVE-2019-19906
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk95th percentile - higher than 95% of all known CVEs
Summary
cyrus-sasl 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is caused by an off-by-one error in _sasl_add_string in common.c.
Risk Assessment
A remote attacker can send a specially crafted LDAP packet, causing the OpenLDAP server to crash and disrupting directory services, potentially impacting organizational operations.
Recommendation
Update cyrus-sasl to a patched version and OpenLDAP to the latest version. Restrict access to the LDAP server to trusted clients.
Other vulnerabilities in cyrus-sasl
See all- CVE-2026-107161High
Heap-based buffer overflow in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin does not recompute buffer size after quoting, leading to out-of-bounds write. A malicious server can crash the client.
- CVE-2000-0956Medium
cyrus-sasl before version 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow users to bypass specified access restrictions.
Original NVD description (English source)
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS