CVE-2011-1754 in jabberd14info

Summary

jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

04/19/2011

Disclosure

06/20/2011

CPE

ready

CVSS

5.3

EPSS

0.00887

Activities

Very Low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!