CVE-2011-2531 Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of service (data truncation)....
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of service (data truncation) by sending a large amount of data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/prosody(Debian:12) | < 0.8.1-1 | 0.8.1-1 |
| debian/prosody(Debian:13) | < 0.8.1-1 | 0.8.1-1 |
| debian/prosody(Debian:14) | < 0.8.1-1 | 0.8.1-1 |
| prosody | = 0.8.0 | No fix listed |
References
- Debian Security Tracker CVE-2011-2531 vendor-advisory
- blog.prosody.im patch
- hg.prosody.im patch
- hg.prosody.im patch
- prosody.im patch