Описание
jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Ссылки
- Broken Link
- Mailing List
- Mailing List
- Mailing List
- Mailing List
- Broken LinkVendor Advisory
- Broken Link
- Broken Link
- Third Party Advisory
- Release Notes
- Broken Link
- Broken Link
- Broken LinkThird Party AdvisoryVDB Entry
- Issue TrackingPatch
- Third Party AdvisoryVDB Entry
- Broken Link
- Broken Link
- Mailing List
- Mailing List
- Mailing List
Уязвимые конфигурации
Одно из
Одно из
EPSS
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
jabberd2 before 2.2.14 does not properly detect recursion during entit ...
jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
EPSS
7.5 High
CVSS3
5 Medium
CVSS2