Fedora: Security Advisory for prosody (FEDORA-2022-426ea6c0b7)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for prosody (FEDORA-2022-50afc572a4)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Debian: Security Advisory (DSA-5047-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

prosody is vulnerable to denial of service DoS attacks. As it does not properly restrict the XML features allowing an attacker to input malicious XML data, resulting in expansion of recursive entity references...

Debian DSA-5047-1 : prosody - security update

The remote Debian 10 / 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5047 advisory. Matthew Wild discovered that the WebSockets code in Prosody, a lightweight Jabber/XMPP server, was susceptible to denial of service. For the oldstable distribution...

FreeBSD : Prosody XMPP server advisory 2022-01-13 (e3ec8b30-757b-11ec-922f-654747404482)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e3ec8b30-757b-11ec-922f-654747404482 advisory. - It was discovered that an internal Prosody library to load XML based on libexpat does not properly...

Denial Of Service (DoS)

prosody is vulnerable to denial of service DoS attacks. The vulnerability may cause denial of service conditions...

[SECURITY] [DSA 5047-1] prosody security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5047-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 15, 2022 https://www.debian.org/security/faq -...

openSUSE 15 Security Update : prosody (openSUSE-SU-2022:0012-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:0012-1 advisory. - It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML...

DSA-5047-1 prosody - security update

Bulletin has no description...

OPENSUSE-SU-2022:0012-1 Security update for prosody

This update for prosody fixes the following issues: Update to 0.11.12: CVE-2022-0217: util.xml: Do not allow doctypes, comments or processing instructions bsc1194596...

PT-2022-4676 · Libexpat +2 · Libexpat +2

Name of the Vulnerable Software and Affected Versions: Prosody affected versions not specified Description: The issue is related to the implementation of the WebSocket server module for Jabber/XMPP in Prosody, which is associated with incorrect restriction of XML links to external objects. This c...

Prosodical Thoughts Prosody安全漏洞

Prosodical Thoughts Prosody is a Prosodical Thoughts open source application . A modern XMPP communication server. A security vulnerability exists in Prosodical Thoughts Prosody due to improper validation of untrusted XML data. A remote attacker could send specially crafted data to the affected...

Security update for prosody (important)

openSUSE Security Update: Security update for prosody Announcement ID: openSUSE-SU-2022:0012-1 Rating: important References: 1194596 Cross-References: CVE-2022-0217 Affected Products: openSUSE Backports SLE-15-SP3 An update that fixes one vulnerability is now available. Description: This update f...

Prosody XMPP server advisory 2022-01-13

The Prosody teaM reports: It was discovered that an internal Prosody library to load XML based on does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, dependi...

The vulnerability of the Prosody server for Jabber/XMPP, related to a resource management mechanism error, allows attackers to trigger a service failure.

The vulnerability of the Prosody server for Jabber/XMPP is related to incorrect processing of requests for re-establishing SSL/TLS connections. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the proxy65 component of the Jabber/XMPP Prosody server, related to the absence of an authentication mechanism, allows attackers to trigger a service failure.

The vulnerability of the proxy65 component of the Jabber/XMPP Prosody server lies in the fact that it is configured with open access by default. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the Prosody server for Jabber/XMPP, related to a resource management mechanism error, allows attackers to trigger a service failure.

The vulnerability of the Prosody Jabber/XMPP server is related to a bug in the resource management mechanism. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the `dialback_without_dialback` option in the `mod_dialback` module of the Prosody Jabber/XMPP server is related to authentication process errors, allowing attackers to access confidential data.

The vulnerability of the dialbackwithoutdialback option in the moddialback module of the Prosody Jabber/XMPP server is related to incorrect authentication of certificates from the remote server. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

The vulnerability of the Prosody Jabber/XMPP server lies in the simultaneous execution using a shared resource with incorrect synchronization, allowing an attacker to gain access to confidential data.

The vulnerability of the Prosody Jabber/XMPP server is related to the use of an algorithm with non-persistent execution time for comparing secret strings. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...