This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2018-6521 →
DEBIAN-CVE-2018-6521
The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. Th...
Original description
The description as published by the source.
The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might be a scenario in which this allows remote attackers to bypass intended access restrictions.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
simplesamlphp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-1"}]}]
Debian:14
simplesamlphp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-1"}]}]
References
- advisory security-tracker.debian.org