CVE-2011-2205

EPSS 1.6%

發布日:2011/6/22修改日:2026/4/28

也稱為:DEBIAN-CVE-2011-2205

描述

Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

受影響套件(1)

Debian/prosodyfrom 0, < 0.7.0-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2011-2205