It was discovered that the Cyrus SASL SQL plugin incorrectly handled SQL input. A remote attacker could use this issue to execute arbitrary SQL commands.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "cyrus-sasl2-doc", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-2", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-2-dbgsym", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-dev", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules-db", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules-db-dbgsym", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules-dbgsym", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules-gssapi-heimdal", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules-gssapi-heimdal-dbgsym", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules-gssapi-mit", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules-gssapi-mit-dbgsym", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules-ldap", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules-ldap-dbgsym", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules-otp", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules-otp-dbgsym", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules-sql", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "libsasl2-modules-sql-dbgsym", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "sasl2-bin", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" }, { "binary_name": "sasl2-bin-dbgsym", "binary_version": "2.1.27~101-g0780600+dfsg-3ubuntu2.4" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "cyrus-sasl2-doc", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-2", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-2-dbgsym", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-dev", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules-db", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules-db-dbgsym", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules-dbgsym", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules-gssapi-heimdal", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules-gssapi-heimdal-dbgsym", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules-gssapi-mit", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules-gssapi-mit-dbgsym", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules-ldap", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules-ldap-dbgsym", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules-otp", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules-otp-dbgsym", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules-sql", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "libsasl2-modules-sql-dbgsym", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "sasl2-bin", "binary_version": "2.1.27+dfsg-2ubuntu0.1" }, { "binary_name": "sasl2-bin-dbgsym", "binary_version": "2.1.27+dfsg-2ubuntu0.1" } ] }