Gajim XEP-0308 DoS

The vulnerability of extension XEP-0308, “Last Message Correction” for the Jabber/XMPP client Gajim, is related to insufficient validation of input data during the verification of message identifiers in a multi-user chat. Exploiting this vulnerability can allow a malicious actor, operating...

CVE-2021-41055

Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service crash via a crafted XMPP Last Message Correction XEP-0308 message in multi-user chat, where the message ID equals the correction ID...

CVE-2021-41055

Gajim vulnerability CVE-2021-41055 affects Gajim 1.2.x and 1.3.x prior to 1.3.3. The flaw arises in XMPP Last Message Correction (XEP-0308) handling in multi-user chat, where a crafted message ID that equals the correction ID can cause a denial of service (crash). The issue is confirmed by the CV...

PT-2021-7306

Name of the Vulnerable Software and Affected Versions Gajim versions 1.2.x through 1.3.2 Description The issue is related to insufficient input validation when checking message IDs in multi-user chat, specifically with the XEP-0308 Last Message Correction extension. This allows remote attackers t...