Lucene search
HistoryFeb 18, 2012 - 12:55 a.m.
CVE-2011-4320
cve-2011-4320
ejabberd
mod_pubsub
denial of service
remote code execution
5.9 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.006 Low
EPSS
Percentile
78.0%
The mod_pubsub module (mod_pubsub.erl) in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service (infinite loop) via a stanza with a publish tag that lacks a node attribute.
| CPE | Name | Operator | Version |
|---|---|---|---|
| process-one:ejabberd | process-one ejabberd | eq | 3.0.0 |
| process-one:ejabberd | process-one ejabberd | eq | 2.1.8 |
Related
cvelist
cvelist
CVE-2011-4320
2012-02-18 00:00:00
openvas
openvas
Fedora Update for ejabberd FEDORA-2011-16281
2012-04-02 00:00:00
Fedora Update for ejabberd FEDORA-2011-16281
2012-04-02 00:00:00
Fedora Update for ejabberd FEDORA-2011-16282
2011-12-19 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: ejabberd-2.1.9-1.fc15
2011-12-17 20:52:27
[SECURITY] Fedora 16 Update: ejabberd-2.1.9-1.fc16
2011-12-17 20:51:56
prion
prion
Code injection
2012-02-18 00:55:00
ubuntucve
ubuntucve
CVE-2011-4320
2012-02-18 00:00:00
nessus
nessus
Fedora 16 : ejabberd-2.1.9-1.fc16 (2011-16281)
2011-12-19 00:00:00
Fedora 15 : ejabberd-2.1.9-1.fc15 (2011-16282)
2011-12-19 00:00:00
debiancve
debiancve
CVE-2011-4320
2012-02-18 00:55:00
osv
osv
Ejabberd DoS via malformed stanza
2022-05-17 05:32:37
github
github
Ejabberd DoS via malformed stanza
2022-05-17 05:32:37
gentoo
gentoo
ejabberd: Multiple Denial of Service vulnerabilities
2012-06-21 00:00:00
5.9 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.006 Low
EPSS
Percentile
78.0%
Related for CVE-2011-4320