CVE-2011-1755
Fixed in a distro release EPSS 4%
jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Products: jabberd2, fedoraproject fedora, apple mac_os_x, apple mac_os_x_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | jabberd2 | 2.2.8-2.1 |
| Debian 13 | jabberd2 | 2.2.8-2.1 |
| Debian 14 | jabberd2 | 2.2.8-2.1 |
| Red Hat network proxy 5.4 | jabberd | 0:2.2.8-12.el5sat |
| Red Hat network proxy 5.4 | jabberd-debuginfo | 0:2.2.8-12.el5sat |
| Red Hat network satellite 5.4 | jabberd | 0:2.2.8-12.el5sat |
| Red Hat network satellite 5.4 | jabberd-debuginfo | 0:2.2.8-12.el5sat |