CVE-2011-2205

Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:prosody:prosody:*:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.1.0:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.2.0:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.4.0:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.4.1:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.4.2:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.5.0:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.5.1:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.5.2:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.6:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.6.0:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.6.1:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.7:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.7.0:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.8:*:*:*:*:*:*:*

History

No history.

Information

Published : 2011-06-22 21:55

Updated : 2024-02-28 11:41


NVD link : CVE-2011-2205

Mitre link : CVE-2011-2205

CVE.ORG link : CVE-2011-2205


JSON object : View

Products Affected

prosody

  • prosody
CWE
CWE-399

Resource Management Errors