Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.

According to the version of the cyrus-sasl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - Cyrus SASL 2.1.23, 2.1.26, and earlier does not     properly handle when a NULL value is returned upon an     error by the crypt function as implemented in glibc     2.17 and later, which allows remote attackers to cause     a denial of service (thread crash and consumption) via     (1) an invalid salt or, when FIPS-140 is enabled, a (2)     DES or (3) MD5 encrypted password, which triggers a     NULL pointer dereference.i1/4^CVE-2013-4122i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that Cyrus SASL incorrectly handled certain invalid password salts. An attacker could use this issue to cause Cyrus SASL to crash, resulting in a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that cyrus-sasl2, a library implementing the Simple Authentication and Security Layer, does not properly handle certain invalid password salts. A remote attacker can take advantage of this flaw to cause a denial of service.

The remote host is affected by the vulnerability described in GLSA-201309-01 (Cyrus-SASL: Denial of Service)

    In the GNU C Library (glibc) from version 2.17 onwards, the crypt()       function call can return NULL when the salt violates specifications or       the system is in FIPS-140 mode and a DES or MD5 hashed password is       passed. When Cyrus-SASL&rsquo;s authentication mechanisms call crypt(), a       NULL may be returned.
  Impact :

    A remote attacker could trigger this vulnerability to cause a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
123859	EulerOS Virtualization 2.5.3 : cyrus-sasl (EulerOS-SA-2019-1173)	Nessus	Huawei Local Security Checks	medium
86219	Ubuntu 15.04 : cyrus-sasl2 vulnerability (USN-2755-1)	Nessus	Ubuntu Local Security Checks	medium
86157	Debian DSA-3368-1 : cyrus-sasl2 - security update	Nessus	Debian Local Security Checks	medium
78281	Amazon Linux AMI : cyrus-sasl (ALAS-2014-338)	Nessus	Amazon Linux Local Security Checks	medium
70367	Ubuntu 13.04 : cyrus-sasl2 vulnerability (USN-1988-1)	Nessus	Ubuntu Local Security Checks	medium
69538	GLSA-201309-01 : Cyrus-SASL: Denial of Service	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2013-4122

high

Tenable Plugins

medium

medium

medium

medium

medium

medium