Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-1753HistoryJun 21, 2011 - 2:52 a.m.
CVE-2011-1753
2011-06-2102:52:00
Debian Security Bug Tracker
security-tracker.debian.org
11
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.061 Low
EPSS
Percentile
93.5%
expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | ejabberd | < 2.1.6-2.1 | ejabberd_2.1.6-2.1_all.deb |
| Debian | 11 | all | ejabberd | < 2.1.6-2.1 | ejabberd_2.1.6-2.1_all.deb |
| Debian | 10 | all | ejabberd | < 2.1.6-2.1 | ejabberd_2.1.6-2.1_all.deb |
| Debian | 999 | all | ejabberd | < 2.1.6-2.1 | ejabberd_2.1.6-2.1_all.deb |
Related
prion
prion
Code injection
2011-06-21 02:52:00
Cross site scripting
2014-12-15 18:59:00
Code injection
2011-10-06 10:55:00
freebsd
freebsd
ejabberd -- remote denial of service vulnerability
2011-04-27 00:00:00
nessus
nessus
FreeBSD : ejabberd -- remote denial of service vulnerability (01d3ab7d-9c43-11e0-bc0f-0014a5e3cda6)
2011-06-27 00:00:00
Fedora 14 : ejabberd-2.1.8-2.fc14 (2011-8437)
2011-06-30 00:00:00
Debian DSA-2248-1 : ejabberd - denial of service
2011-06-10 00:00:00
openvas
openvas
FreeBSD Ports: ejabberd
2011-08-03 00:00:00
FreeBSD Ports: ejabberd
2011-08-03 00:00:00
Debian: Security Advisory (DSA-2248-1)
2011-08-03 00:00:00
ubuntucve
ubuntucve
cve
cve
fedora
fedora
[SECURITY] Fedora 15 Update: ejabberd-2.1.8-2.fc15
2011-06-29 21:53:07
[SECURITY] Fedora 14 Update: ejabberd-2.1.8-2.fc14
2011-06-29 22:00:35
securityvulns
securityvulns
[SECURITY] [DSA 2248-1] ejabberd security update
2011-06-02 00:00:00
Citadel Jabber server / Jabberd / ejabberd DoS
2011-06-02 00:00:00
[ MDVSA-2009:221 ] libneon0.27
2009-08-25 00:00:00
debian
debian
[SECURITY] [DSA 2248-1] ejabberd security update
2011-05-31 21:01:35
debiancve
debiancve
osv
osv
JBossWS vulnerable to uncontrolled recursion
2022-05-13 01:39:29
CVE-2017-18640
2019-12-12 03:15:10
SnakeYAML Entity Expansion during load operation
2021-06-04 21:37:45
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:53:01
github
github
SnakeYAML Entity Expansion during load operation
2021-06-04 21:37:45
JBossWS vulnerable to uncontrolled recursion
2022-05-13 01:39:29
redhatcve
redhatcve
CVE-2017-18640
2020-04-08 21:02:33
centos
centos
libxml2 security update
2008-09-12 01:23:56
redhat
redhat
(RHSA-2008:0886) Important: libxml2 security update
2008-09-11 00:00:00
gentoo
gentoo
ejabberd: Multiple Denial of Service vulnerabilities
2012-06-21 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.061 Low
EPSS
Percentile
93.5%
Related for DEBIANCVE:CVE-2011-1753