CVE-2026-43506

Опубликовано: 01 мая 2026

Источник: nvd

CVSS3: 5.3

CVSS3: 7.5

EPSS Низкий

Описание

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by memory leaks from unauthenticated connections.

Ссылки

https://prosody.im/security/advisory_735dd9d3/
Mitigation
Patch
Vendor Advisory
https://www.openwall.com/lists/oss-security/2026/05/01/5
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:prosody:prosody:*:*:*:*:*:*:*:*

Версия до 0.12.6 (исключая)

cpe:2.3:a:prosody:prosody:*:*:*:*:*:*:*:*

Версия от 13.0.0 (включая) до 13.0.5 (исключая)

EPSS

Процентиль: 20%

0.00279

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-401

Связанные уязвимости

CVE-2026-43506

CVSS3: 5.3

ubuntu

4 месяца назад

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by memory leaks from unauthenticated connections.

CVE-2026-43506

CVSS3: 5.3

debian

4 месяца назад

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13. ...

GHSA-q553-9xvw-ww8h

CVSS3: 5.3

github

4 месяца назад

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by memory leaks from unauthenticated connections.

EPSS

Процентиль: 20%

0.00279

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-401