459 matches found
UBUNTU-CVE-2022-0217
It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, depending on the libexpa...
CVE-2022-0217
It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, depending on the libexpa...
CVE-2022-0217
It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, depending on the libexpa...
CVE-2022-0217
It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, depending on the libexpa...
CVE-2022-0217
CVE-2022-0217 concerns an internal Prosody XML-loading library that uses libexpat. The issue is that not all XML features were properly restricted, enabling potential recursion expansion of entity references in DTDs (CWE-776) and, depending on the libexpat version, possible injections via XML Ext...
CVE-2021-32918
An issue was discovered in Prosody before 0.11.9. Default settings are susceptible to remote unauthenticated denial-of-service DoS attacks via memory exhaustion when running under Lua 5.2 or Lua 5.3...
CVE-2021-32921
An issue was discovered in Prosody before 0.11.9. It does not use a constant-time algorithm for comparing certain secret strings when running under Lua 5.2 or later. This can potentially be used in a timing attack to reveal the contents of secret strings to an attacker...
[SECURITY] [DSA 5047-2] prosody regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-5047-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 29, 2022 https://www.debian.org/security/faq -...
DSA-5047-2 prosody - regression update
Bulletin has no description...
GLSA-202105-15 : Prosody IM: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202105-15 Prosody IM: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Prosody IM. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...
[SECURITY] Fedora 35 Update: prosody-0.11.12-1.fc35
Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...
[SECURITY] Fedora 34 Update: prosody-0.11.12-1.fc34
Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...
Fedora: Security Advisory for prosody (FEDORA-2022-50afc572a4)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for prosody (FEDORA-2022-426ea6c0b7)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Debian: Security Advisory (DSA-5047-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Denial Of Service (DoS)
prosody is vulnerable to denial of service DoS attacks. As it does not properly restrict the XML features allowing an attacker to input malicious XML data, resulting in expansion of recursive entity references...
Debian DSA-5047-1 : prosody - security update
The remote Debian 10 / 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5047 advisory. Matthew Wild discovered that the WebSockets code in Prosody, a lightweight Jabber/XMPP server, was susceptible to denial of service. For the oldstable distribution...
FreeBSD : Prosody XMPP server advisory 2022-01-13 (e3ec8b30-757b-11ec-922f-654747404482)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e3ec8b30-757b-11ec-922f-654747404482 advisory. - It was discovered that an internal Prosody library to load XML based on libexpat does not properly...
Denial Of Service (DoS)
prosody is vulnerable to denial of service DoS attacks. The vulnerability may cause denial of service conditions...
[SECURITY] [DSA 5047-1] prosody security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5047-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 15, 2022 https://www.debian.org/security/faq -...