SQL injection in Cyrus SASL - CVE-2022-24407

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU60842

SQL injection in Cyrus SASL - CVE-2022-24407

Published: February 24, 2022


Vulnerability identifier: #VU60842
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-24407
CWE-ID: CWE-89
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.

The vulnerability exists due to insufficient sanitization of password in the SQL plugin shipped with Cyrus SASL. A remote non-authenticated attacker can send a specially crafted request to the affected application and execute arbitrary SQL commands within the application database.

Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected application.


Affected software

Cyrus SASL
Amazon Linux AMI
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)
Red Hat Enterprise Linux for IBM z Systems
CentOS
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Anolis OS
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE Linux Enterprise Server
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Point of Sale
Oracle Solaris
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Workstation Extension
Slackware Linux
Ubuntu
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Module for Legacy Software
SUSE Linux Enterprise Module for Basesystem
openEuler
Fedora
Red Hat OpenShift Serverless
Harbor
Red Hat Virtualization
OpenShift Virtualization
Red Hat OpenShift GitOps
IBM QRadar Network Security
Service Telemetry Framework
Ansible Automation Platform
Red Hat Advanced Cluster Security for Kubernetes
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Dell Secure Connect Gateway
IBM Security Access Manager for Enterprise Single-Sign On
IBM Robotic Process Automation
Oracle Communications Cloud Native Core Binding Support Function
Session Smart Router
Red Hat OpenStack
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
IBM Edge Application Manager
Traffix SDC
cyrus-sasl2 (Debian package)
cyrus-sasl (Red Hat package)
redhat-release-virtualization-host (Red Hat package)
redhat-virtualization-host (Red Hat package)
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
cyrus-sasl-sqlauxprop-32bit
cyrus-sasl-digestmd5
cyrus-sasl-openssl1
cyrus-sasl-openssl1-crammd5
cyrus-sasl-openssl1-digestmd5
cyrus-sasl-openssl1-gssapi
cyrus-sasl-openssl1-ntlm
cyrus-sasl-openssl1-otp
cyrus-sasl-openssl1-plain
cyrus-sasl-openssl1-32bit
cyrus-sasl-openssl1-crammd5-32bit
cyrus-sasl-openssl1-digestmd5-32bit
cyrus-sasl
cyrus-sasl-crammd5
cyrus-sasl-openssl1-crammd5-x86
cyrus-sasl-gssapi
cyrus-sasl-otp
cyrus-sasl-plain
cyrus-sasl-saslauthd
cyrus-sasl-sqlauxprop
cyrus-sasl-32bit
cyrus-sasl-crammd5-32bit
cyrus-sasl-digestmd5-32bit
cyrus-sasl-gssapi-32bit
cyrus-sasl-otp-32bit
cyrus-sasl-plain-32bit
cyrus-sasl-debuginfo
cyrus-sasl-openssl1-debuginfo-32bit
cyrus-sasl-openssl1-debugsource
cyrus-sasl-openssl1-debuginfo
cyrus-sasl-debuginfo-32bit
cyrus-sasl-openssl1-gssapi-32bit
cyrus-sasl-saslauthd-debugsource
cyrus-sasl-saslauthd-debuginfo
cyrus-sasl-debugsource
cyrus-sasl-openssl1-x86
cyrus-sasl-openssl1-plain-x86
cyrus-sasl-openssl1-otp-x86
cyrus-sasl-openssl1-gssapi-x86
cyrus-sasl-openssl1-digestmd5-x86
cyrus-sasl-openssl1-plain-32bit
cyrus-sasl-openssl1-otp-32bit
libsasl2-modules-sql (Ubuntu package)
cyrus-sasl-digestmd5-debuginfo
cyrus-sasl-crammd5-debuginfo
cyrus-sasl-devel
cyrus-sasl-gssapi-debuginfo
libsasl2-3-32bit-debuginfo
libsasl2-3-32bit
cyrus-sasl-plain-32bit-debuginfo
cyrus-sasl-gssapi-32bit-debuginfo
cyrus-sasl-digestmd5-32bit-debuginfo
cyrus-sasl-crammd5-32bit-debuginfo
cyrus-sasl-32bit-debuginfo
libsasl2-3-debuginfo
cyrus-sasl-otp-debuginfo
cyrus-sasl-plain-debuginfo
cyrus-sasl-sqlauxprop-debuginfo
libsasl2-3
cyrus-sasl-gssapi-debuginfo-32bit
cyrus-sasl-otp-debuginfo-32bit
cyrus-sasl-plain-debuginfo-32bit
libsasl2-3-debuginfo-32bit
cyrus-sasl-crammd5-debuginfo-32bit
cyrus-sasl-sqlauxprop-debuginfo-32bit
cyrus-sasl-digestmd5-debuginfo-32bit
cyrus-sasl-sql
cyrus-sasl-scram
cyrus-sasl-ntlm
cyrus-sasl-md5
cyrus-sasl-lib
cyrus-sasl-ldap
cyrus-sasl-gs2
cyrus-sasl-help
cyrus-sasl-bdb-digestmd5-debuginfo
cyrus-sasl-bdb-plain-debuginfo
cyrus-sasl-bdb-plain
cyrus-sasl-bdb-otp-debuginfo
cyrus-sasl-bdb-otp
cyrus-sasl-bdb-ntlm-debuginfo
cyrus-sasl-bdb-ntlm
cyrus-sasl-bdb-gssapi-debuginfo
cyrus-sasl-bdb-gssapi
cyrus-sasl-bdb-gs2-debuginfo
cyrus-sasl-bdb-gs2
cyrus-sasl-bdb-digestmd5
cyrus-sasl-bdb
cyrus-sasl-bdb-devel
cyrus-sasl-bdb-debugsource
cyrus-sasl-bdb-debuginfo
cyrus-sasl-sqlauxprop-bdb-debuginfo
cyrus-sasl-sqlauxprop-bdb
cyrus-sasl-bdb-scram
cyrus-sasl-saslauthd-bdb-debugsource
cyrus-sasl-saslauthd-bdb-debuginfo
cyrus-sasl-saslauthd-bdb
cyrus-sasl-bdb-scram-debuginfo
redhat-virtualization-host-productimg (Red Hat package)
Red Hat Virtualization Host
Dell Policy Manager for Secure Connect Gateway (SCG)
EMC ECS
XtremIO X2
IBM Qradar SIEM
MySQL Connectors
Zimbra Collaboration
Oracle Communications Cloud Native Core Security Edge Protection Proxy
Oracle Communications Cloud Native Core Console
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity Operating Environment (OE)
Dell EMC Unity XT Operating Environment (OE)
Juniper Junos Space

How to mitigate CVE-2022-24407

Install updates from vendor's website.

Cyrus SASL - update to 2.1.28
Red Hat OpenShift Serverless - update to 1.21.0
Red Hat OpenShift GitOps - addressed in versions 1.2.3, 1.3.6, 1.4.4
Migration Toolkit for Containers - addressed in versions 1.5.4, 1.7.3, 1.7.4
Harbor - update to 1.10.11
cyrus-sasl2 (Debian package) - addressed in versions 2.1.27+dfsg-2.1+deb11u1, 2.1.27+dfsg-1+deb10u2
cyrus-sasl (Red Hat package) - addressed in versions 2.1.23-16.el6_10, 2.1.26-24.el7_9, 2.1.27-2.el8_1, 2.1.27-2.el8_2, 2.1.27-6.el8_4, 2.1.27-6.el8_5
Red Hat Advanced Cluster Security for Kubernetes - update to 3.68.2
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.0.8
redhat-release-virtualization-host (Red Hat package) - addressed in versions 4.3.22-1.el7ev, 4.4.10-2.el8ev
redhat-virtualization-host (Red Hat package) - update to 4.3.22-20220330.1.el7_9
Red Hat OpenShift Container Platform - addressed in versions 4.6.57, 4.11.0, 4.11.45
OpenShift Virtualization - addressed in versions 4.9.4, 4.10.0, 4.10.1, 4.11.0
Dell Secure Connect Gateway - update to 5.12.00.10
IBM QRadar Network Security - addressed in versions 5.4.0.16, 5.5.0.11
Dell Policy Manager for Secure Connect Gateway (SCG) - update to 5.12.00.00
IBM Qradar SIEM - addressed in versions 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2
MySQL Connectors - update to 8.0.32
Zimbra Collaboration - addressed in versions 8.8.15 Patch 33, 9.0.0 Patch 26
IBM Robotic Process Automation - update to 21.0.2.3
cyrus-sasl-sqlauxprop-32bit - addressed in versions 2.1.22-182.26.7.1, 2.1.26-14.5.1
cyrus-sasl-digestmd5 - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-openssl1 - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-crammd5 - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-digestmd5 - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-gssapi - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-ntlm - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-otp - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-plain - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-32bit - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-crammd5-32bit - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-digestmd5-32bit - update to 2.1.22-182.26.7.1
cyrus-sasl - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-crammd5 - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-openssl1-crammd5-x86 - update to 2.1.22-182.26.7.1
cyrus-sasl-gssapi - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-otp - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-plain - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-saslauthd - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-sqlauxprop - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-32bit - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-crammd5-32bit - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-digestmd5-32bit - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-gssapi-32bit - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-otp-32bit - addressed in versions 2.1.22-182.26.7.1, 2.1.26-8.17.1, 2.1.26-14.5.1
cyrus-sasl-plain-32bit - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-debuginfo - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-openssl1-debuginfo-32bit - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-debugsource - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-debuginfo - update to 2.1.22-182.26.7.1
cyrus-sasl-debuginfo-32bit - addressed in versions 2.1.22-182.26.7.1, 2.1.26-8.17.1, 2.1.26-14.5.1
cyrus-sasl-openssl1-gssapi-32bit - update to 2.1.22-182.26.7.1
cyrus-sasl-saslauthd-debugsource - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-saslauthd-debuginfo - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-debugsource - addressed in versions 2.1.22-182.26.7.1, 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-openssl1-x86 - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-plain-x86 - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-otp-x86 - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-gssapi-x86 - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-digestmd5-x86 - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-plain-32bit - update to 2.1.22-182.26.7.1
cyrus-sasl-openssl1-otp-32bit - update to 2.1.22-182.26.7.1
libsasl2-modules-sql (Ubuntu package) - addressed in versions 2.1.26.dfsg114ubuntu0.2+esm1, 2.1.27+dfsg-2.1ubuntu0.1, 2.1.27+dfsg-2ubuntu0.1, 2.1.27~101-g0780600+dfsg-3ubuntu2.4
cyrus-sasl-digestmd5-debuginfo - addressed in versions 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-crammd5-debuginfo - addressed in versions 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-devel - addressed in versions 2.1.26-5.10.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-gssapi-debuginfo - addressed in versions 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
libsasl2-3-32bit-debuginfo - addressed in versions 2.1.26-5.10.1, 2.1.27-150300.4.6.1
libsasl2-3-32bit - addressed in versions 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-plain-32bit-debuginfo - addressed in versions 2.1.26-5.10.1, 2.1.27-150300.4.6.1
cyrus-sasl-gssapi-32bit-debuginfo - addressed in versions 2.1.26-5.10.1, 2.1.27-150300.4.6.1
cyrus-sasl-digestmd5-32bit-debuginfo - addressed in versions 2.1.26-5.10.1, 2.1.27-150300.4.6.1
cyrus-sasl-crammd5-32bit-debuginfo - addressed in versions 2.1.26-5.10.1, 2.1.27-150300.4.6.1
cyrus-sasl-32bit-debuginfo - addressed in versions 2.1.26-5.10.1, 2.1.27-150300.4.6.1
libsasl2-3-debuginfo - addressed in versions 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-otp-debuginfo - addressed in versions 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-plain-debuginfo - addressed in versions 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-sqlauxprop-debuginfo - addressed in versions 2.1.26-5.10.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
libsasl2-3 - addressed in versions 2.1.26-5.10.1, 2.1.26-8.17.1, 2.1.26-14.5.1, 2.1.27-150300.4.6.1
cyrus-sasl-gssapi-debuginfo-32bit - addressed in versions 2.1.26-8.17.1, 2.1.26-14.5.1
cyrus-sasl-otp-debuginfo-32bit - addressed in versions 2.1.26-8.17.1, 2.1.26-14.5.1
cyrus-sasl-plain-debuginfo-32bit - addressed in versions 2.1.26-8.17.1, 2.1.26-14.5.1
libsasl2-3-debuginfo-32bit - addressed in versions 2.1.26-8.17.1, 2.1.26-14.5.1
cyrus-sasl-crammd5-debuginfo-32bit - addressed in versions 2.1.26-8.17.1, 2.1.26-14.5.1
cyrus-sasl-sqlauxprop-debuginfo-32bit - update to 2.1.26-14.5.1
cyrus-sasl-digestmd5-debuginfo-32bit - update to 2.1.26-14.5.1
cyrus-sasl-sql - addressed in versions 2.1.26-24, 2.1.27-6
cyrus-sasl-scram - addressed in versions 2.1.26-24, 2.1.27-6
cyrus-sasl-plain - addressed in versions 2.1.26-24, 2.1.27-6
cyrus-sasl-ntlm - addressed in versions 2.1.26-24, 2.1.27-6
cyrus-sasl-md5 - addressed in versions 2.1.26-24, 2.1.27-6
cyrus-sasl-lib - addressed in versions 2.1.26-24, 2.1.27-6
cyrus-sasl-ldap - addressed in versions 2.1.26-24, 2.1.27-6
cyrus-sasl-gssapi - addressed in versions 2.1.26-24, 2.1.27-6
cyrus-sasl-gs2 - addressed in versions 2.1.26-24, 2.1.27-6
cyrus-sasl-devel - addressed in versions 2.1.26-24, 2.1.27-6
cyrus-sasl - addressed in versions 2.1.26-24, 2.1.27-6
cyrus-sasl - addressed in versions 2.1.27-9.fc34, 2.1.27-14.fc35, 2.1.27-18.fc36
cyrus-sasl - update to 2.1.27-12
cyrus-sasl-debugsource - update to 2.1.27-12
cyrus-sasl-ntlm - update to 2.1.27-12
cyrus-sasl-md5 - update to 2.1.27-12
cyrus-sasl-devel - update to 2.1.27-12
cyrus-sasl-gs2 - update to 2.1.27-12
cyrus-sasl-ldap - update to 2.1.27-12
cyrus-sasl-sql - update to 2.1.27-12
cyrus-sasl-gssapi - update to 2.1.27-12
cyrus-sasl-lib - update to 2.1.27-12
cyrus-sasl-debuginfo - update to 2.1.27-12
cyrus-sasl-plain - update to 2.1.27-12
cyrus-sasl-scram - update to 2.1.27-12
cyrus-sasl-help - update to 2.1.27-12
cyrus-sasl - update to 2.1.27-18
cyrus-sasl-bdb-digestmd5-debuginfo - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-plain-debuginfo - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-plain - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-otp-debuginfo - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-otp - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-ntlm-debuginfo - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-ntlm - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-gssapi-debuginfo - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-gssapi - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-gs2-debuginfo - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-gs2 - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-digestmd5 - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-devel - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-debugsource - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-debuginfo - update to 2.1.27-150300.4.6.1
cyrus-sasl-sqlauxprop-bdb-debuginfo - update to 2.1.27-150300.4.6.1
cyrus-sasl-sqlauxprop-bdb - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-scram - update to 2.1.27-150300.4.6.1
cyrus-sasl-saslauthd-bdb-debugsource - update to 2.1.27-150300.4.6.1
cyrus-sasl-saslauthd-bdb-debuginfo - update to 2.1.27-150300.4.6.1
cyrus-sasl-saslauthd-bdb - update to 2.1.27-150300.4.6.1
cyrus-sasl-bdb-scram-debuginfo - update to 2.1.27-150300.4.6.1
EMC ECS - update to 3.7.0.2
redhat-virtualization-host-productimg (Red Hat package) - update to 4.3.22-1.el7
Dell EMC Unity VSA Operating Environment (OE) - update to 5.2.0.0.5.173
Dell EMC Unity Operating Environment (OE) - update to 5.2.0.0.5.173
Dell EMC Unity XT Operating Environment (OE) - update to 5.2.0.0.5.173
Session Smart Router - addressed in versions 5.4.7, 5.5.3
XtremIO X2 - update to 6.4.2-13
Red Hat OpenStack - update to 16.2
Juniper Junos Space - update to 22.2R1

External References

Related Security Bulletins