CVE-2019-19906
HighAdvisory
Published 19 Dec 2019In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.080
- 94th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 232
- of 17,781 indexed, latest versions
- Container images
- 188
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: cyrus-sasl security, bug fix, and enhancement update
Carried by container images the latest versions of 232 of 17,781 indexed charts deploy, on 188 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cyrus-sasl2deb | 2.1.25.dfsg1-17build1, 2.1.26.dfsg1-13+deb8u1, 2.1.26.dfsg1-14build1, 2.1.26.dfsg1-14ubuntu0.1+3 more | 2.1.25.dfsg1-17ubuntu0.1~esm1, 2.1.26.dfsg1-13+deb8u2, 2.1.26.dfsg1-14ubuntu0.2, 2.1.27+dfsg-1+deb10u1+2 more | 162 |
| cyrus-saslrpm | 2.1.26-5.7.1, 2.1.27-0.3rc7.el8, 2.1.27-1.el8, 2.1.27-2.el8_2 | 0:2.1.27-5.el8, 2.1.26-150000.5.13.1 | 19 |
| cyrus-saslapk | 2.1.27-r1, 2.1.27-r3 | 2.1.27-r2, 2.1.27-r4 | 7 |
- OSV records
- ALPINE-CVE-2019-19906RHSA-2020:4497UBUNTU-CVE-2019-19906DLA-2044-1DSA-4591-1SUSE-SU-2022:3549-1
- Also known as
- USN-4256-1
Charts affected
232 by stars
Container images carrying it
188 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| percona/ | eaa3fcb7a5a2 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| pnnlmiscscripts/ | 155131891741 | cyrus-sasl | 0:2.1.27-5.el8 | 1 |
| polyakov/ | dbcef69146b8 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| rancher/ | e66f32d19eb9 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| raykrueger/ | c8baf3de57bb | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| resouer/ | e2f198b49ba7 | cyrus-sasl2 | 2.1.25.dfsg1-17ubuntu0.1~esm1 | 1 |
| richardchesterwood/ | 0b540a28f5a6 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| richardchesterwood/ | 36c43961214c | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| royalwang/ | df99e2499f91 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3+deb9u1 | 1 |
| rundeck/ | b13e8059ad72 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| scrapinghub/ | a5f89bc84606 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.1 | 1 |
| seldonio/ | 1d0da98a2d76 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| sismics/ | f4b0ef019cf1 | cyrus-sasl2 | 2.1.27~101-g0780600+dfsg-3ubuntu2.1 | 1 |
| stakater/ | 4f8e409f30c2 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| svtechnmaa/ | e19aba397c1f | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u1 | 1 |
| tensorflow/ | 1e3172090703 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| timothyclarke/ | 40a80ced8031 | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| tpdock/ | 3da600c95a49 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| voltha/ | 59ab2a00f712 | cyrus-sasl2 | 2.1.25.dfsg1-17ubuntu0.1~esm1 | 1 |
| wiremind/ | 4dea42c8166c | cyrus-sasl2 | 2.1.27+dfsg-1+deb10u1 | 1 |
| zenko/ | 386a1f48ec0e | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| gcr.io/ | 10f4dbc8eeeb | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| gcr.io/ | cb5c1bddd1b5 | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| gcr.io/ | 5ea7b7f3632a | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| gcr.io/ | 8f9ff98fdbef | cyrus-sasl2 | 2.1.26.dfsg1-14ubuntu0.2 | 1 |
| ghcr.io/ | 61daa1bba5cb | cyrus-sasl | 2.1.26-150000.5.13.1 | 1 |
| ghcr.io/ | 760eee87f839 | cyrus-sasl | 2.1.26-150000.5.13.1 | 1 |
| ghcr.io/ | 6a1432b0d503 | cyrus-sasl | 2.1.26-150000.5.13.1 | 1 |
| ghcr.io/ | f059af4de8ed | cyrus-sasl | 2.1.26-150000.5.13.1 | 1 |
| ghcr.io/ | c7c70b527255 | cyrus-sasl | 2.1.26-150000.5.13.1 | 1 |
| ghcr.io/ | e24a9e0a21b6 | cyrus-sasl | 2.1.26-150000.5.13.1 | 1 |
| ghcr.io/ | 8caf5289fe73 | cyrus-sasl | 0:2.1.27-5.el8 | 1 |
| quay.io/ | 86b71e90319f | cyrus-sasl2 | 2.1.26.dfsg1-13+deb8u2 | 1 |
| quay.io/ | 7a4b9fedc724 | cyrus-sasl | 0:2.1.27-5.el8 | 1 |
| quay.io/ | c2851757eca4 | cyrus-sasl | 0:2.1.27-5.el8 | 1 |
| quay.io/ | 6722d5041b47 | cyrus-sasl | 0:2.1.27-5.el8 | 1 |
| quay.io/ | 0bbe8b451fa3 | cyrus-sasl | 0:2.1.27-5.el8 | 1 |