CVE-2011-2531 in Prosody

Summary

Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of service (data truncation) by sending a large amount of data.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 06/22/2011
• Disclosure: 06/22/2011
• Moderation: VulDB entry created
• Entries: VDB-57753 (1)
• CPE: ready
• CWE: CWE-399 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00767
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-2531
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-2531
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-2531/