#VU33161 NULL pointer dereference in Cyrus SASL - CVE-2013-4122

Vulnerability identifier: #VU33161

Vulnerability risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2013-4122

CWE-ID: CWE-476

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Cyrus SASL
Server applications / Mail servers

Vendor: Carnegie Mellon University

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can trigger denial of service conditions via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.

Mitigation
Update to version 2.1.24.

Vulnerable software versions

Cyrus SASL: 2.1.23

---

External links
https://git.cyrusimap.org/cyrus-sasl/commit/?id=dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d
https://security.gentoo.org/glsa/glsa-201309-01.xml
https://www.debian.org/security/2015/dsa-3368
https://www.openwall.com/lists/oss-security/2013/07/12/3
https://www.openwall.com/lists/oss-security/2013/07/12/6
https://www.openwall.com/lists/oss-security/2013/07/13/1
https://www.openwall.com/lists/oss-security/2013/07/15/1
https://www.ubuntu.com/usn/USN-2755-1
https://www.linuxquestions.org/questions/slackware-14/%5Bslackware-current%5D-glibc-2-17-shadow-and-other-penumbrae-4175461061/

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.