Your submission was sent successfully! Close

USN-1988-1: Cyrus SASL vulnerability

9 October 2013

Cyrus SASL could be made to crash if it processed specially crafted input.



  • cyrus-sasl2 - Cyrus Simple Authentication and Security Layer


It was discovered that Cyrus SASL incorrectly handled certain invalid
password salts. An attacker could use this issue to cause Cyrus SASL to
crash, resulting in a denial of service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 13.04

After a standard system update you need to reboot your computer to make all
the necessary changes.


Related notices