Vulnerability Bulletins

DSA-4591 cyrus-sasl2 - security update

   
Affected software Debian
 
Stephan Zeisberg reported an out-of-bounds write vulnerability in the_sasl_add_string() function in cyrus-sasl2, a library implementing theSimple Authentication and Security Layer. A remote attacker can takeadvantage of this issue to cause denial-of-service conditions forapplications using the library.

More info:

https://www.debian.org/security/2019/dsa-4591