CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
72.8%
DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Vendor | Product | Version | CPE |
---|---|---|---|
brad_fitzpatrick | djabberd | * | cpe:2.3:a:brad_fitzpatrick:djabberd:*:*:*:*:*:*:*:* |
brad_fitzpatrick | djabberd | 0.80 | cpe:2.3:a:brad_fitzpatrick:djabberd:0.80:*:*:*:*:*:*:* |
brad_fitzpatrick | djabberd | 0.81 | cpe:2.3:a:brad_fitzpatrick:djabberd:0.81:*:*:*:*:*:*:* |
brad_fitzpatrick | djabberd | 0.82 | cpe:2.3:a:brad_fitzpatrick:djabberd:0.82:*:*:*:*:*:*:* |
brad_fitzpatrick | djabberd | 0.83 | cpe:2.3:a:brad_fitzpatrick:djabberd:0.83:*:*:*:*:*:*:* |