Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-10807

Fixed in a distro release EPSS 3%

JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled.

Published 2017-07-04 · CVE record · OSV

Products: jabberd2

Distro releases

ReleasePackageFixed in
Debian 12jabberd22.6.1-1
Debian 13jabberd22.6.1-1
Debian 14jabberd22.6.1-1
Debian 9jabberd22.4.0-3+deb9u1
SUSE Manager Proxy 3.0jabberd2.6.1-4.6.1
SUSE Manager Proxy 3.1jabberd2.6.1-3.3.1
SUSE Manager Proxy 3.1osad5.11.80.3-2.3.1
SUSE Manager Proxy 3.1rhnpush5.5.104.3-2.3.2
SUSE Manager Proxy 3.1spacewalk-backend2.7.73.7-2.3.1
SUSE Manager Proxy 3.1spacewalk-certs-tools2.7.0.7-2.3.1
SUSE Manager Proxy 3.1spacewalk-proxy2.7.1.4-2.3.1
SUSE Manager Proxy 3.1spacewalk-web2.7.1.10-2.3.1
SUSE Manager Proxy 3.1spacewalksd5.0.26.3-2.3.1
SUSE Manager Proxy 3.1supportutils-plugin-susemanager-client3.1.2-2.3.1
SUSE Manager Proxy 3.1zypp-plugin-spacewalk0.9.16-2.3.1
SUSE Manager Server 3.0jabberd2.6.1-4.6.1
SUSE Manager Server 3.1cobbler2.6.6-5.3.1
SUSE Manager Server 3.1jabberd2.6.1-3.3.1
SUSE Manager Server 3.1osad5.11.80.3-2.3.1
SUSE Manager Server 3.1rhnpush5.5.104.3-2.3.2
SUSE Manager Server 3.1salt-netapi-client0.12.0-3.3.1
SUSE Manager Server 3.1smdba1.5.8-0.2.3.1
SUSE Manager Server 3.1spacecmd2.7.8.6-2.3.1
SUSE Manager Server 3.1spacewalk-backend2.7.73.7-2.3.1
SUSE Manager Server 3.1spacewalk-branding2.7.2.7-2.3.1
SUSE Manager Server 3.1spacewalk-certs-tools2.7.0.7-2.3.1
SUSE Manager Server 3.1spacewalk-java2.7.46.5-2.3.1
SUSE Manager Server 3.1spacewalk-search2.7.3.2-2.3.4
SUSE Manager Server 3.1spacewalk-utils2.7.10.5-2.3.1
SUSE Manager Server 3.1spacewalk-web2.7.1.10-2.3.1
SUSE Manager Server 3.1susemanager3.1.8-2.3.1
SUSE Manager Server 3.1susemanager-docs_en3-10.3.1
SUSE Manager Server 3.1susemanager-schema3.1.9-2.3.1
SUSE Manager Server 3.1susemanager-sync-data3.1.6-2.3.1
Ubuntu 16.04 LTSjabberd2no fix