Описание
The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of service (infinite loop) via invalid JSON data, as demonstrated by truncated data.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| hardy | DNE | |
| lucid | not-affected | |
| maverick | not-affected | |
| natty | not-affected | |
| upstream | released | 0.8.1 |
Показывать по
Ссылки на источники
5 Medium
CVSS2
Связанные уязвимости
The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of service (infinite loop) via invalid JSON data, as demonstrated by truncated data.
The json.decode function in util/json.lua in Prosody 0.8.x before 0.8. ...
The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of service (infinite loop) via invalid JSON data, as demonstrated by truncated data.
5 Medium
CVSS2