Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.
Published 2013-10-27 00:55:04
Updated 2016-12-08 03:03:30
Source Red Hat, Inc.
View at NVD,   CVE.org
Vulnerability category: Memory CorruptionDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2013-4122

1.00%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 84 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-4122

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
4.3
MEDIUM AV:N/AC:M/Au:N/C:N/I:N/A:P
8.6
2.9
NIST

CWE ids for CVE-2013-4122

  • Assigned by: nvd@nist.gov (Primary)

References for CVE-2013-4122

Products affected by CVE-2013-4122

  • CMU » Cyrus-sasl
    Versions up to, including, (<=) 2.1.26
    cpe:2.3:a:cmu:cyrus-sasl:*:*:*:*:*:*:*:*
    When used together with: GNU » Glibc » Version: 2.2
    When used together with: GNU » Glibc » Version: 2.2.1
    When used together with: GNU » Glibc » Version: 2.2.2
    When used together with: GNU » Glibc » Version: 2.2.3
    When used together with: GNU » Glibc » Version: 2.2.4
    When used together with: GNU » Glibc » Version: 2.2.5
    When used together with: GNU » Glibc » Version: 2.3
    When used together with: GNU » Glibc » Version: 2.3.1
    When used together with: GNU » Glibc » Version: 2.3.2
    When used together with: GNU » Glibc » Version: 2.3.3
    When used together with: GNU » Glibc » Version: 2.3.4
    When used together with: GNU » Glibc » Version: 2.3.5
    When used together with: GNU » Glibc » Version: 2.3.6
    When used together with: GNU » Glibc » Version: 2.3.10
    When used together with: GNU » Glibc » Version: 2.4
    When used together with: GNU » Glibc » Version: 2.5
    When used together with: GNU » Glibc » Version: 2.5.1
    When used together with: GNU » Glibc » Version: 2.6
    When used together with: GNU » Glibc » Version: 2.6.1
    When used together with: GNU » Glibc » Version: 2.7
    When used together with: GNU » Glibc » Version: 2.8
    When used together with: GNU » Glibc » Version: 2.9
    When used together with: GNU » Glibc » Version: 2.17
    When used together with: GNU » Glibc » Version: 2.18
  • CMU » Cyrus-sasl » Version: 2.1.22
    cpe:2.3:a:cmu:cyrus-sasl:2.1.22:*:*:*:*:*:*:*
    When used together with: GNU » Glibc » Version: 2.2
    When used together with: GNU » Glibc » Version: 2.2.1
    When used together with: GNU » Glibc » Version: 2.2.2
    When used together with: GNU » Glibc » Version: 2.2.3
    When used together with: GNU » Glibc » Version: 2.2.4
    When used together with: GNU » Glibc » Version: 2.2.5
    When used together with: GNU » Glibc » Version: 2.3
    When used together with: GNU » Glibc » Version: 2.3.1
    When used together with: GNU » Glibc » Version: 2.3.2
    When used together with: GNU » Glibc » Version: 2.3.3
    When used together with: GNU » Glibc » Version: 2.3.4
    When used together with: GNU » Glibc » Version: 2.3.5
    When used together with: GNU » Glibc » Version: 2.3.6
    When used together with: GNU » Glibc » Version: 2.3.10
    When used together with: GNU » Glibc » Version: 2.4
    When used together with: GNU » Glibc » Version: 2.5
    When used together with: GNU » Glibc » Version: 2.5.1
    When used together with: GNU » Glibc » Version: 2.6
    When used together with: GNU » Glibc » Version: 2.6.1
    When used together with: GNU » Glibc » Version: 2.7
    When used together with: GNU » Glibc » Version: 2.8
    When used together with: GNU » Glibc » Version: 2.9
    When used together with: GNU » Glibc » Version: 2.17
    When used together with: GNU » Glibc » Version: 2.18
  • CMU » Cyrus-sasl » Version: 2.1.21
    cpe:2.3:a:cmu:cyrus-sasl:2.1.21:*:*:*:*:*:*:*
    When used together with: GNU » Glibc » Version: 2.2
    When used together with: GNU » Glibc » Version: 2.2.1
    When used together with: GNU » Glibc » Version: 2.2.2
    When used together with: GNU » Glibc » Version: 2.2.3
    When used together with: GNU » Glibc » Version: 2.2.4
    When used together with: GNU » Glibc » Version: 2.2.5
    When used together with: GNU » Glibc » Version: 2.3
    When used together with: GNU » Glibc » Version: 2.3.1
    When used together with: GNU » Glibc » Version: 2.3.2
    When used together with: GNU » Glibc » Version: 2.3.3
    When used together with: GNU » Glibc » Version: 2.3.4
    When used together with: GNU » Glibc » Version: 2.3.5
    When used together with: GNU » Glibc » Version: 2.3.6
    When used together with: GNU » Glibc » Version: 2.3.10
    When used together with: GNU » Glibc » Version: 2.4
    When used together with: GNU » Glibc » Version: 2.5
    When used together with: GNU » Glibc » Version: 2.5.1
    When used together with: GNU » Glibc » Version: 2.6
    When used together with: GNU » Glibc » Version: 2.6.1
    When used together with: GNU » Glibc » Version: 2.7
    When used together with: GNU » Glibc » Version: 2.8
    When used together with: GNU » Glibc » Version: 2.9
    When used together with: GNU » Glibc » Version: 2.17
    When used together with: GNU » Glibc » Version: 2.18
  • CMU » Cyrus-sasl » Version: 2.1.24
    cpe:2.3:a:cmu:cyrus-sasl:2.1.24:*:*:*:*:*:*:*
    When used together with: GNU » Glibc » Version: 2.2
    When used together with: GNU » Glibc » Version: 2.2.1
    When used together with: GNU » Glibc » Version: 2.2.2
    When used together with: GNU » Glibc » Version: 2.2.3
    When used together with: GNU » Glibc » Version: 2.2.4
    When used together with: GNU » Glibc » Version: 2.2.5
    When used together with: GNU » Glibc » Version: 2.3
    When used together with: GNU » Glibc » Version: 2.3.1
    When used together with: GNU » Glibc » Version: 2.3.2
    When used together with: GNU » Glibc » Version: 2.3.3
    When used together with: GNU » Glibc » Version: 2.3.4
    When used together with: GNU » Glibc » Version: 2.3.5
    When used together with: GNU » Glibc » Version: 2.3.6
    When used together with: GNU » Glibc » Version: 2.3.10
    When used together with: GNU » Glibc » Version: 2.4
    When used together with: GNU » Glibc » Version: 2.5
    When used together with: GNU » Glibc » Version: 2.5.1
    When used together with: GNU » Glibc » Version: 2.6
    When used together with: GNU » Glibc » Version: 2.6.1
    When used together with: GNU » Glibc » Version: 2.7
    When used together with: GNU » Glibc » Version: 2.8
    When used together with: GNU » Glibc » Version: 2.9
    When used together with: GNU » Glibc » Version: 2.17
    When used together with: GNU » Glibc » Version: 2.18
  • CMU » Cyrus-sasl » Version: 2.1.25
    cpe:2.3:a:cmu:cyrus-sasl:2.1.25:*:*:*:*:*:*:*
    When used together with: GNU » Glibc » Version: 2.2
    When used together with: GNU » Glibc » Version: 2.2.1
    When used together with: GNU » Glibc » Version: 2.2.2
    When used together with: GNU » Glibc » Version: 2.2.3
    When used together with: GNU » Glibc » Version: 2.2.4
    When used together with: GNU » Glibc » Version: 2.2.5
    When used together with: GNU » Glibc » Version: 2.3
    When used together with: GNU » Glibc » Version: 2.3.1
    When used together with: GNU » Glibc » Version: 2.3.2
    When used together with: GNU » Glibc » Version: 2.3.3
    When used together with: GNU » Glibc » Version: 2.3.4
    When used together with: GNU » Glibc » Version: 2.3.5
    When used together with: GNU » Glibc » Version: 2.3.6
    When used together with: GNU » Glibc » Version: 2.3.10
    When used together with: GNU » Glibc » Version: 2.4
    When used together with: GNU » Glibc » Version: 2.5
    When used together with: GNU » Glibc » Version: 2.5.1
    When used together with: GNU » Glibc » Version: 2.6
    When used together with: GNU » Glibc » Version: 2.6.1
    When used together with: GNU » Glibc » Version: 2.7
    When used together with: GNU » Glibc » Version: 2.8
    When used together with: GNU » Glibc » Version: 2.9
    When used together with: GNU » Glibc » Version: 2.17
    When used together with: GNU » Glibc » Version: 2.18
  • CMU » Cyrus-sasl » Version: 1.5.28
    cpe:2.3:a:cmu:cyrus-sasl:1.5.28:*:*:*:*:*:*:*
    When used together with: GNU » Glibc » Version: 2.2
    When used together with: GNU » Glibc » Version: 2.2.1
    When used together with: GNU » Glibc » Version: 2.2.2
    When used together with: GNU » Glibc » Version: 2.2.3
    When used together with: GNU » Glibc » Version: 2.2.4
    When used together with: GNU » Glibc » Version: 2.2.5
    When used together with: GNU » Glibc » Version: 2.3
    When used together with: GNU » Glibc » Version: 2.3.1
    When used together with: GNU » Glibc » Version: 2.3.2
    When used together with: GNU » Glibc » Version: 2.3.3
    When used together with: GNU » Glibc » Version: 2.3.4
    When used together with: GNU » Glibc » Version: 2.3.5
    When used together with: GNU » Glibc » Version: 2.3.6
    When used together with: GNU » Glibc » Version: 2.3.10
    When used together with: GNU » Glibc » Version: 2.4
    When used together with: GNU » Glibc » Version: 2.5
    When used together with: GNU » Glibc » Version: 2.5.1
    When used together with: GNU » Glibc » Version: 2.6
    When used together with: GNU » Glibc » Version: 2.6.1
    When used together with: GNU » Glibc » Version: 2.7
    When used together with: GNU » Glibc » Version: 2.8
    When used together with: GNU » Glibc » Version: 2.9
    When used together with: GNU » Glibc » Version: 2.17
    When used together with: GNU » Glibc » Version: 2.18
  • CMU » Cyrus-sasl » Version: 2.1.20
    cpe:2.3:a:cmu:cyrus-sasl:2.1.20:*:*:*:*:*:*:*
    When used together with: GNU » Glibc » Version: 2.2
    When used together with: GNU » Glibc » Version: 2.2.1
    When used together with: GNU » Glibc » Version: 2.2.2
    When used together with: GNU » Glibc » Version: 2.2.3
    When used together with: GNU » Glibc » Version: 2.2.4
    When used together with: GNU » Glibc » Version: 2.2.5
    When used together with: GNU » Glibc » Version: 2.3
    When used together with: GNU » Glibc » Version: 2.3.1
    When used together with: GNU » Glibc » Version: 2.3.2
    When used together with: GNU » Glibc » Version: 2.3.3
    When used together with: GNU » Glibc » Version: 2.3.4
    When used together with: GNU » Glibc » Version: 2.3.5
    When used together with: GNU » Glibc » Version: 2.3.6
    When used together with: GNU » Glibc » Version: 2.3.10
    When used together with: GNU » Glibc » Version: 2.4
    When used together with: GNU » Glibc » Version: 2.5
    When used together with: GNU » Glibc » Version: 2.5.1
    When used together with: GNU » Glibc » Version: 2.6
    When used together with: GNU » Glibc » Version: 2.6.1
    When used together with: GNU » Glibc » Version: 2.7
    When used together with: GNU » Glibc » Version: 2.8
    When used together with: GNU » Glibc » Version: 2.9
    When used together with: GNU » Glibc » Version: 2.17
    When used together with: GNU » Glibc » Version: 2.18
  • CMU » Cyrus-sasl » Version: 2.1.19
    cpe:2.3:a:cmu:cyrus-sasl:2.1.19:*:*:*:*:*:*:*
    When used together with: GNU » Glibc » Version: 2.2
    When used together with: GNU » Glibc » Version: 2.2.1
    When used together with: GNU » Glibc » Version: 2.2.2
    When used together with: GNU » Glibc » Version: 2.2.3
    When used together with: GNU » Glibc » Version: 2.2.4
    When used together with: GNU » Glibc » Version: 2.2.5
    When used together with: GNU » Glibc » Version: 2.3
    When used together with: GNU » Glibc » Version: 2.3.1
    When used together with: GNU » Glibc » Version: 2.3.2
    When used together with: GNU » Glibc » Version: 2.3.3
    When used together with: GNU » Glibc » Version: 2.3.4
    When used together with: GNU » Glibc » Version: 2.3.5
    When used together with: GNU » Glibc » Version: 2.3.6
    When used together with: GNU » Glibc » Version: 2.3.10
    When used together with: GNU » Glibc » Version: 2.4
    When used together with: GNU » Glibc » Version: 2.5
    When used together with: GNU » Glibc » Version: 2.5.1
    When used together with: GNU » Glibc » Version: 2.6
    When used together with: GNU » Glibc » Version: 2.6.1
    When used together with: GNU » Glibc » Version: 2.7
    When used together with: GNU » Glibc » Version: 2.8
    When used together with: GNU » Glibc » Version: 2.9
    When used together with: GNU » Glibc » Version: 2.17
    When used together with: GNU » Glibc » Version: 2.18
  • CMU » Cyrus-sasl » Version: 2.1.23
    cpe:2.3:a:cmu:cyrus-sasl:2.1.23:*:*:*:*:*:*:*
    When used together with: GNU » Glibc » Version: 2.2
    When used together with: GNU » Glibc » Version: 2.2.1
    When used together with: GNU » Glibc » Version: 2.2.2
    When used together with: GNU » Glibc » Version: 2.2.3
    When used together with: GNU » Glibc » Version: 2.2.4
    When used together with: GNU » Glibc » Version: 2.2.5
    When used together with: GNU » Glibc » Version: 2.3
    When used together with: GNU » Glibc » Version: 2.3.1
    When used together with: GNU » Glibc » Version: 2.3.2
    When used together with: GNU » Glibc » Version: 2.3.3
    When used together with: GNU » Glibc » Version: 2.3.4
    When used together with: GNU » Glibc » Version: 2.3.5
    When used together with: GNU » Glibc » Version: 2.3.6
    When used together with: GNU » Glibc » Version: 2.3.10
    When used together with: GNU » Glibc » Version: 2.4
    When used together with: GNU » Glibc » Version: 2.5
    When used together with: GNU » Glibc » Version: 2.5.1
    When used together with: GNU » Glibc » Version: 2.6
    When used together with: GNU » Glibc » Version: 2.6.1
    When used together with: GNU » Glibc » Version: 2.7
    When used together with: GNU » Glibc » Version: 2.8
    When used together with: GNU » Glibc » Version: 2.9
    When used together with: GNU » Glibc » Version: 2.17
    When used together with: GNU » Glibc » Version: 2.18
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!