Known vulnerabilities in cyrus-sasl2 (Debian package) 2.1.26.dfsg1-13+deb8u2

Vendor: Debian
Version: 2.1.26.dfsg1-13+deb8u2
Software CPE: cpe:2.3:o:debian:cyrus-sasl2_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting cyrus-sasl2 (Debian package) version 2.1.26.dfsg1-13+deb8u2 cyrus-sasl2 (Debian package) 2.1.26.dfsg1-13+deb8u2 is affected by 2 vulnerabilities: 1 high, 1 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24407
CWE-89 High
No
No
2.1.27+dfsg-2.1+deb11u1, 2.1.27+dfsg-1+deb10u2 24.02.2022 SB2022022409
SB2022022410
SB2022022421
and 67 more
#VU23796 - Out-of-bounds write
CVE-2019-19906
CWE-787 Medium
No
No
2.1.27+dfsg-1+deb10u1, 2.1.27~101-g0780600+dfsg-3+deb9u1 23.12.2019 SB2019122303
SB2019122304
SB2020012820
and 15 more