CVE-2011-1757 DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document...
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| brad fitzpatrick djabberd | <= 0.84 | No fix listed |
| brad fitzpatrick djabberd | = 0.80 | No fix listed |
| brad fitzpatrick djabberd | = 0.81 | No fix listed |
| brad fitzpatrick djabberd | = 0.82 | No fix listed |
| brad fitzpatrick djabberd | = 0.83 | No fix listed |