CVE-2006-1721: Cyrus Sasl

Low severity, CVSS 2.6. EPSS: 2.5% chance of exploitation in the next 30 days.

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.

Affected products

• Cyrus Sasl: version 2.1.18 only; version 2.1.18_r1 only; version 2.1.18_r2 only; version 2.1.19 only; version 2.1.20 only

Published 2006-04-11. Last modified 2026-06-16.