{
  "cveId": "CVE-2026-107161",
  "url": "https://patchblox.com/security/cve/CVE-2026-107161",
  "summary": "CVE-2026-107161 is fixed in 27 products on 1 platform, first by DEBIAN-CVE-2026-107161, released October 19, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients",
  "description": "A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting (escaping special characters) makes the value longer. The under-sized buffer is then passed to strcat(), causing a heap-based out-of-bounds write whose size depends on attacker-controlled input. A malicious or on-path DIGEST-MD5 (or HTTP Digest) server can trigger this flaw in a connecting client by supplying a crafted challenge field, such as realm or nonce, most likely resulting in a crash of the client application.",
  "published": "2026-10-07T20:17:10Z",
  "severity": "Important",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "cwe": "Heap-based Buffer Overflow",
  "epss": 0.00376,
  "epssPercentile": 0.31808,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107161",
  "fixes": [
    {
      "platform": "linux",
      "product": "cyrus-sasl",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.1.28-160000.4.1",
      "fix": "OPENSUSE-SU-2026:22146-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-22146-1",
      "released": "2026-11-07T00:47:19Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl",
      "release": "sles 15.6",
      "fixedVersion": "2.1.28-150600.7.17.1",
      "fix": "SUSE-SU-2026:4836-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4836-1",
      "released": "2026-11-07T00:42:08Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl",
      "release": "sles 15.7",
      "fixedVersion": "2.1.28-150600.7.17.1",
      "fix": "SUSE-SU-2026:4836-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4836-1",
      "released": "2026-11-07T00:42:08Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl",
      "release": "sles 16.0",
      "fixedVersion": "2.1.28-160000.4.1",
      "fix": "SUSE-SU-2026:24266-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-24266-1",
      "released": "2026-11-07T00:44:01Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-bdb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.1.28-160000.4.1",
      "fix": "OPENSUSE-SU-2026:22146-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-22146-1",
      "released": "2026-11-07T00:47:19Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-bdb",
      "release": "sles 15.6",
      "fixedVersion": "2.1.28-150600.7.17.1",
      "fix": "SUSE-SU-2026:4836-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4836-1",
      "released": "2026-11-07T00:42:08Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-bdb",
      "release": "sles 15.7",
      "fixedVersion": "2.1.28-150600.7.17.1",
      "fix": "SUSE-SU-2026:4836-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4836-1",
      "released": "2026-11-07T00:42:08Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-devel",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-devel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-gs2",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-gs2-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-gssapi",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-gssapi-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-ldap",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-ldap-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-lib",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-lib-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-md5",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-md5-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-ntlm",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-ntlm-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-plain",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-plain-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-saslauthd",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.1.28-160000.4.1",
      "fix": "OPENSUSE-SU-2026:22146-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-22146-1",
      "released": "2026-11-07T00:47:19Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-saslauthd",
      "release": "sles 15.6",
      "fixedVersion": "2.1.28-150600.7.17.1",
      "fix": "SUSE-SU-2026:4836-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4836-1",
      "released": "2026-11-07T00:42:08Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-saslauthd",
      "release": "sles 15.7",
      "fixedVersion": "2.1.28-150600.7.17.1",
      "fix": "SUSE-SU-2026:4836-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4836-1",
      "released": "2026-11-07T00:42:08Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-saslauthd",
      "release": "sles 16.0",
      "fixedVersion": "2.1.28-160000.4.1",
      "fix": "SUSE-SU-2026:24266-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-24266-1",
      "released": "2026-11-07T00:44:01Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-saslauthd-bdb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "2.1.28-160000.4.1",
      "fix": "OPENSUSE-SU-2026:22146-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-22146-1",
      "released": "2026-11-07T00:47:19Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-saslauthd-bdb",
      "release": "sles 15.6",
      "fixedVersion": "2.1.28-150600.7.17.1",
      "fix": "SUSE-SU-2026:4836-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4836-1",
      "released": "2026-11-07T00:42:08Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-saslauthd-bdb",
      "release": "sles 15.7",
      "fixedVersion": "2.1.28-150600.7.17.1",
      "fix": "SUSE-SU-2026:4836-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4836-1",
      "released": "2026-11-07T00:42:08Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-scram",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-scram-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-sql",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl-sql-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2.1.27-18.amzn2023.0.4",
      "fix": "ALAS2023-2026-3290",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3290",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl2",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "2.1.28\u002Bdfsg-10\u002Bdeb12u1",
      "fix": "DEBIAN-CVE-2026-107161",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-107161",
      "released": "2026-10-19T16:27:52Z"
    },
    {
      "platform": "linux",
      "product": "cyrus-sasl2",
      "release": "Debian 14",
      "fixedVersion": "2.1.28\u002Bdfsg1-12",
      "fix": "DEBIAN-CVE-2026-107161",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-107161",
      "released": "2026-10-19T16:27:52Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}