Поиск уязвимостей
Количество 11
Количество 11
ALT-PU-2018-2853
ALT-PU-2018-2853: package `prosody` update to version 0.11.1-alt1
CVE-2017-18265
Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in, for example, the c2s module.
CVE-2017-18265
Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in, for example, the c2s module.
CVE-2017-18265
Prosody before 0.10.0 allows remote attackers to cause a denial of ser ...
CVE-2018-10847
prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance.
CVE-2018-10847
prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance.
CVE-2018-10847
prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authenticat ...
GHSA-3xch-grx2-hhmh
Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in, for example, the c2s module.
openSUSE-SU-2018:1632-1
Security update for prosody
openSUSE-SU-2018:1627-1
Security update for prosody
GHSA-r7gq-256h-j4mq
prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2018-2853 ALT-PU-2018-2853: package `prosody` update to version 0.11.1-alt1 | CVSS3: 8.8 | почти 8 лет назад | |
 | CVE-2017-18265 Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in, for example, the c2s module. | CVSS3: 7.5 | 2% Низкий | больше 8 лет назад |
 | CVE-2017-18265 Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in, for example, the c2s module. | CVSS3: 7.5 | 2% Низкий | больше 8 лет назад |
| CVE-2017-18265 Prosody before 0.10.0 allows remote attackers to cause a denial of ser ... | CVSS3: 7.5 | 2% Низкий | больше 8 лет назад |
| CVE-2018-10847 prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance. | CVSS3: 8.8 | 2% Низкий | больше 8 лет назад |
| CVE-2018-10847 prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance. | CVSS3: 8.8 | 2% Низкий | больше 8 лет назад |
| CVE-2018-10847 prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authenticat ... | CVSS3: 8.8 | 2% Низкий | больше 8 лет назад |
| GHSA-3xch-grx2-hhmh Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in, for example, the c2s module. | CVSS3: 7.5 | 2% Низкий | больше 4 лет назад |
 | openSUSE-SU-2018:1632-1 Security update for prosody | 2% Низкий | больше 8 лет назад | |
| openSUSE-SU-2018:1627-1 Security update for prosody | 2% Низкий | больше 8 лет назад | |
| GHSA-r7gq-256h-j4mq prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance. | CVSS3: 8.8 | 2% Низкий | больше 4 лет назад |
Уязвимостей на страницу