Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2019-19906 — HIGH severity vulnerability | Release Alert

CVE-2019-19906

7.5

HIGHCVSS v3

Published

December 19, 2019

CVSS v2

5 MEDIUM

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.

cyrusimap/cyrus-sasl

GitHub

< 2.1.28NVD

Docker HubDEPRECATED; The official build of CentOS.

= 7.0NVD

Crates.io

More on this CVE

NVD↗GitHub Advisory↗

Base library for interacting with Fedora web services

= 31, = 32NVD

Docker HubOfficial Docker builds of Fedora

= 31, = 32NVD

NPMDigital Repository Ireland - fedora backend operations

= 31, = 32NVD

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 31, = 32NVD