3 matches found
The vulnerability of extension XEP-0308: Last Message Correction for the Jabber/XMPP client Gajim, which allows a violator to trigger a service failure.
The vulnerability of extension XEP-0308, “Last Message Correction” for the Jabber/XMPP client Gajim, is related to insufficient validation of input data during the verification of message identifiers in a multi-user chat. Exploiting this vulnerability can allow a malicious actor, operating...
CVE-2021-41055
Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service crash via a crafted XMPP Last Message Correction XEP-0308 message in multi-user chat, where the message ID equals the correction ID...
CVE-2021-41055
Gajim vulnerability CVE-2021-41055 affects Gajim 1.2.x and 1.3.x prior to 1.3.3. The flaw arises in XMPP Last Message Correction (XEP-0308) handling in multi-user chat, where a crafted message ID that equals the correction ID can cause a denial of service (crash). The issue is confirmed by the CV...