Lucene search
+L

3 matches found

BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.14 views

The vulnerability of extension XEP-0308: Last Message Correction for the Jabber/XMPP client Gajim, which allows a violator to trigger a service failure.

The vulnerability of extension XEP-0308, “Last Message Correction” for the Jabber/XMPP client Gajim, is related to insufficient validation of input data during the verification of message identifiers in a multi-user chat. Exploiting this vulnerability can allow a malicious actor, operating...

7.8CVSS7.2AI score0.01518EPSS
SaveExploits1References5Affected Software2
NVD
NVD
added 2021/10/11 3:15 a.m.26 views

CVE-2021-41055

Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service crash via a crafted XMPP Last Message Correction XEP-0308 message in multi-user chat, where the message ID equals the correction ID...

7.5CVSS0.01518EPSS
SaveExploits1References2
CVE
CVE
added 2021/10/11 2:40 a.m.80 views

CVE-2021-41055

Gajim vulnerability CVE-2021-41055 affects Gajim 1.2.x and 1.3.x prior to 1.3.3. The flaw arises in XMPP Last Message Correction (XEP-0308) handling in multi-user chat, where a crafted message ID that equals the correction ID can cause a denial of service (crash). The issue is confirmed by the CV...

7.5CVSS7.1AI score0.01518EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder