https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:41:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-09740 bdu:2015-09740 https://cve.radiocsirt.org/vuln/bdu:2015-09740 https://cve.radiocsirt.org/vuln/bell-cve-2013-4122 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2013-4122 https://cve.radiocsirt.org/vuln/cleanstart-2024-xi23677 <p><strong>Affected:</strong> CleanStart: cyrus-sasl</p> <p>Security vulnerability affects the cyrus-sasl package. Cyrus SASL 2.</p> <p><strong>Affected:</strong> CleanStart: cyrus-sasl</p> <p>Security vulnerability affects the cyrus-sasl package. Cyrus SASL 2.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-xi23677 https://cve.radiocsirt.org/vuln/euvd-2026-107226 EUVD-2026-107226 https://cve.radiocsirt.org/vuln/euvd-2026-107226 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4122 <p>Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.</p> <p>Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-4122 https://cve.radiocsirt.org/vuln/ghsa-pwpx-m778-r79w <p>Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.</p> <p>Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.</p> https://cve.radiocsirt.org/vuln/ghsa-pwpx-m778-r79w https://cve.radiocsirt.org/vuln/gsd-2013-4122 gsd-2013-4122 https://cve.radiocsirt.org/vuln/gsd-2013-4122 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4122 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cyrus-sasl2</p> <p>Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cyrus-sasl2</p> <p>Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4122