Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-2058

Опубликовано: 12 авг. 2015
Источник: nvd
CVSS2: 6.5
EPSS Низкий

Описание

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:jabberd2:jabberd2:*:*:*:*:*:*:*:*
Версия до 2.3.2 (включая)

EPSS

Процентиль: 65%
0.00483
Низкий

6.5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

ubuntu
больше 10 лет назад

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID.

redhat
почти 11 лет назад

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID.

debian
больше 10 лет назад

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates dat ...

github
больше 3 лет назад

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID.

EPSS

Процентиль: 65%
0.00483
Низкий

6.5 Medium

CVSS2

Дефекты

CWE-200