NVD

Id
39783  
Name
CVE-2013-4122  
Description
Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-10-26  
Modified Date
2016-12-07  
Seq
2013-4122  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202363 39783 CVE-2013-4122 http://git.cyrusimap.org/cyrus-sasl/commit/?id=dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d  View
202364 39783 CVE-2013-4122 GLSA-201309-01  View
202365 39783 CVE-2013-4122 DSA-3368  View
202366 39783 CVE-2013-4122 [oss-security] 20130712 CVE request: Cyrus-sasl NULL ptr. dereference  View
202367 39783 CVE-2013-4122 [oss-security] 20130712 Re: CVE request: Cyrus-sasl NULL ptr. dereference  View
202368 39783 CVE-2013-4122 [oss-security] 20130713 Re: CVE request: Cyrus-sasl NULL ptr. dereference  View
202369 39783 CVE-2013-4122 [oss-security] 20130715 Re: CVE request: Cyrus-sasl NULL ptr. dereference  View
202370 39783 CVE-2013-4122 USN-2755-1  View
202371 39783 CVE-2013-4122 https://www.linuxquestions.org/questions/slackware-14/%5Bslackware-current%5D-glibc-2-17-shadow-and-other-penumbrae-4175461061/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23341 JVNDB-2013-004916 Cyrus SASL におけるサービス運用妨害 (DoS) の脆弱性 Cyrus SASL は、glibc に実装された crypt 関数によるエラーで NULL 値が返された場合、適切に処理されないため、サービス運用妨害 (スレッドクラッシュおよび消費) 状態にされる脆弱性が存在します。 CVE-2013-4122 64064 CVE-2013-4122 39783 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004916.html 2013-07-11 2013-10-29 View