CVE-2011-2205

Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU…

published June 22, 2011

CVSS
—
EPSS
2%
Percentile
81.3
In the wild
Unconfirmed
What it is

Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02069 · 81.3th percentile
Published
2011-06-22T21:00Z
EPSS history
Timeline
  • 22 JUN 21:00Z
    Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU…
    cvelistv5