CVE-2019-19906
HighAdvisory
Published 19 Dec 2019In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.080
- 94th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 232
- of 17,781 indexed, latest versions
- Container images
- 188
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: cyrus-sasl security, bug fix, and enhancement update
Carried by container images the latest versions of 232 of 17,781 indexed charts deploy, on 188 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cyrus-sasl2deb | 2.1.25.dfsg1-17build1, 2.1.26.dfsg1-13+deb8u1, 2.1.26.dfsg1-14build1, 2.1.26.dfsg1-14ubuntu0.1+3 more | 2.1.25.dfsg1-17ubuntu0.1~esm1, 2.1.26.dfsg1-13+deb8u2, 2.1.26.dfsg1-14ubuntu0.2, 2.1.27+dfsg-1+deb10u1+2 more | 162 |
| cyrus-saslrpm | 2.1.26-5.7.1, 2.1.27-0.3rc7.el8, 2.1.27-1.el8, 2.1.27-2.el8_2 | 0:2.1.27-5.el8, 2.1.26-150000.5.13.1 | 19 |
| cyrus-saslapk | 2.1.27-r1, 2.1.27-r3 | 2.1.27-r2, 2.1.27-r4 | 7 |
- OSV records
- ALPINE-CVE-2019-19906RHSA-2020:4497UBUNTU-CVE-2019-19906DLA-2044-1DSA-4591-1SUSE-SU-2022:3549-1
- Also known as
- USN-4256-1
Charts affected
232 by stars
Container images carrying it
188 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| camptocamp/ | bff736b15623 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| camptocamp/ | 073be594d145 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| cdignam/ | 5a6a55b39cee | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u1 | 1 |
| ceticasbl/ | 6c0aa7567145 | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u1 | 1 |
| cfcontainerization/ | 7366b11c5fa5 | cyrus-sasl | 2.1.26-150000.5.13.1 | 1 |
| cfcontainerization/ | 43131dbc0c8f | cyrus-sasl | 2.1.26-150000.5.13.1 | 1 |
| chetangautamm/ | b4b94155ff5a | cyrus-sasl2 | 2.1.25.dfsg1-17ubuntu0.1~esm1 | 1 |
| cheyang/ | 46cc34755493 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| chorss/ | 5c549cacb8ab | cyrus-sasl | 2.1.27-r2 | 1 |
| codylundquist/ | 630ab586b8c1 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| confluentinc/ | c87b1c07fb53 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| confluentinc/ | 5f990b0f43c9 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| ctron/ | 8fdea8f76499 | cyrus-sasl | 0:2.1.27-5.el8 | 1 |
| daskdev/ | 4ecd7bc35500 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| daskdev/ | 052630f5ca04 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.1 | 1 |
| datalust/ | 9c731bb207a6 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| dniel/ | 45a667852f2a | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.1 | 1 |
| dpage/ | a5a656e1d5fd | cyrus-sasl | 2.1.27-r2 | 1 |
| drgrove/ | 361721759a2b | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| dstacademy/ | 46487aa079b0 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| eaudeweb/ | b8ad9b7e19bb | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u1 | 1 |
| egdsandaru/ | 681baa1926f4 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| erlio/ | dcdaf720107c | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| ethereumex/ | a7603aa8df4c | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| fiware/ | 3e3ec88d59ed | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| free5gmano/ | 36f806935519 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| galaxy/ | 0267bad550e6 | cyrus-sasl2 | 2.1.25.dfsg1-17ubuntu0.1~esm1 | 1 |
| galaxy/ | 8e577a626dfd | cyrus-sasl2 | 2.1.25.dfsg1-17ubuntu0.1~esm1 | 1 |
| gocd/ | 53588bd3221f | cyrus-sasl | 2.1.27-r2 | 1 |
| gocd/ | 2da45cb09d57 | cyrus-sasl | 2.1.27-r2 | 1 |
| grafana/ | 104f434d47c8 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| grafana/ | 9e7fe9c7903a | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| grafana/ | a6b37f9afdd9 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| grafana/ | b5591419cfa3 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| graylog2/ | 8ff28c66e6c1 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| guacamole/ | 333a7f40c145 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| halkeye/ | 77b05e95fdb5 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| hickey/ | c1148a09ef20 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| hyperledger/ | c65891b6c237 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| ibmcom/ | 2dcde9774493 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| ibmcom/ | c796a4c693b4 | cyrus-sasl | 0:2.1.27-5.el8 | 1 |
| ibmcom/ | 9c73804b37a3 | cyrus-sasl | 0:2.1.27-5.el8 | 1 |
| ibmcom/ | 9a766604a73b | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| ibmcom/ | 7e4dc1e27cdf | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| ibmcom/ | b5d8c6714dbc | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| ibmcom/ | e17bdccc5030 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| ibmcom/ | cd5065df7304 | cyrus-sasl | 0:2.1.27-5.el8 | 1 |
| ibmcom/ | 395e60cc6e3d | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.1 | 1 |
| istio/ | 268ab879ea51 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| istio/ | c09319753454 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |