Detections
Analytics

Echo: libauthen-sasl-perl: security update to 2.1700-1+e1

critical Tenable Self-Hosted Container Security Plugin ID 478287

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses
 via unverified nonce in server_step. server_start generates a fresh nonce and sends it in the challenge,
 and nothing later compares that value against the nonce the client returns. server_step derives the
 expected digest from the client's own parameters, so a response verifies whenever its digest matches the
 nonce it carries. The count table it also checks is keyed on the client-supplied nonce and starts empty in
 each new server object, so a captured first response, carrying `nc=00000001`, passes that too. RFC 2831
 defines the nonce in the response as the value the server sent in the preceding challenge. An attacker who
 observes one successful `qop=auth` exchange can replay the captured response against a later session for
 the same service, host, realm and user, and authenticate as that user without knowing the password.
 (CVE-2026-86219)

Solution

Update the libauthen-sasl-perl library and its related packages to version 2.1700-1+e1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-86219

Plugin Details

Severity: Critical

ID: 478287

Version: Revision 1.1

Type: Local

Published: 11/4/2026

Updated: 11/4/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.32

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-86219

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 11/3/2026

Vulnerability Publication Date: 9/6/2026

Reference Information

CVE: CVE-2026-86219