Security Advisory
CVE-2019-19906
7.5
HIGH
Vulnerability Description
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
Published Date
December 19, 2019
Official Source
NIST NVD Advisory