CVE-2011-1757
21.06.2011, 02:52
DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.Enginsight
| Vendor | Product | Version |
|---|---|---|
| brad_fitzpatrick | djabberd | 𝑥 ≤ 0.84 |
| brad_fitzpatrick | djabberd | 0.80 |
| brad_fitzpatrick | djabberd | 0.81 |
| brad_fitzpatrick | djabberd | 0.82 |
| brad_fitzpatrick | djabberd | 0.83 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration