CVE-2011-2531 in Prosody

Riassunto

di MITRE

Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of service (data truncation) by sending a large amount of data.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 22/06/2011
• Divulgazione: 22/06/2011
• Moderazione: accettato
• Voce: VDB-57753
• CPE: pronto
• CWE: CWE-399 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.01232
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-2531
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-2531
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-2531/