CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-1753

expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.019

EPSS Ranking 82.6%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2011-1753

Process-One » Ejabberd » Version: 0.9

cpe:2.3:a:process-one:ejabberd:0.9
Process-One » Ejabberd » Version: 0.9.1

cpe:2.3:a:process-one:ejabberd:0.9.1
Process-One » Ejabberd » Version: 0.9.8

cpe:2.3:a:process-one:ejabberd:0.9.8
Process-One » Ejabberd » Version: 1.0.0

cpe:2.3:a:process-one:ejabberd:1.0.0
Process-One » Ejabberd » Version: 1.1.0

cpe:2.3:a:process-one:ejabberd:1.1.0
Process-One » Ejabberd » Version: 1.1.1

cpe:2.3:a:process-one:ejabberd:1.1.1
Process-One » Ejabberd » Version: 1.1.1.0

cpe:2.3:a:process-one:ejabberd:1.1.1.0
Process-One » Ejabberd » Version: 1.1.1.1

cpe:2.3:a:process-one:ejabberd:1.1.1.1
Process-One » Ejabberd » Version: 1.1.14

cpe:2.3:a:process-one:ejabberd:1.1.14
Process-One » Ejabberd » Version: 1.1.2

cpe:2.3:a:process-one:ejabberd:1.1.2
Process-One » Ejabberd » Version: 1.1.3

cpe:2.3:a:process-one:ejabberd:1.1.3
Process-One » Ejabberd » Version: 2.0.0

cpe:2.3:a:process-one:ejabberd:2.0.0
Process-One » Ejabberd » Version: 2.0.1_2

cpe:2.3:a:process-one:ejabberd:2.0.1_2
Process-One » Ejabberd » Version: 2.0.2

cpe:2.3:a:process-one:ejabberd:2.0.2
Process-One » Ejabberd » Version: 2.0.3

cpe:2.3:a:process-one:ejabberd:2.0.3
Process-One » Ejabberd » Version: 2.0.4

cpe:2.3:a:process-one:ejabberd:2.0.4
Process-One » Ejabberd » Version: 2.0.5

cpe:2.3:a:process-one:ejabberd:2.0.5
Process-One » Ejabberd » Version: 2.1.0

cpe:2.3:a:process-one:ejabberd:2.1.0
Process-One » Ejabberd » Version: 2.1.1

cpe:2.3:a:process-one:ejabberd:2.1.1
Process-One » Ejabberd » Version: 2.1.2

cpe:2.3:a:process-one:ejabberd:2.1.2
Process-One » Ejabberd » Version: 2.1.3

cpe:2.3:a:process-one:ejabberd:2.1.3
Process-One » Ejabberd » Version: 2.1.4

cpe:2.3:a:process-one:ejabberd:2.1.4
Process-One » Ejabberd » Version: 2.1.5

cpe:2.3:a:process-one:ejabberd:2.1.5
Process-One » Ejabberd » Version: 2.1.6

cpe:2.3:a:process-one:ejabberd:2.1.6
Process-One » Ejabberd » Version: 3.0.0

cpe:2.3:a:process-one:ejabberd:3.0.0
Process-One » Exmpp » Version: 0.9.1

cpe:2.3:a:process-one:exmpp:0.9.1
Process-One » Exmpp » Version: 0.9.2

cpe:2.3:a:process-one:exmpp:0.9.2
Process-One » Exmpp » Version: 0.9.3

cpe:2.3:a:process-one:exmpp:0.9.3
Process-One » Exmpp » Version: 0.9.4

cpe:2.3:a:process-one:exmpp:0.9.4
Process-One » Exmpp » Version: 0.9.5

cpe:2.3:a:process-one:exmpp:0.9.5
Process-One » Exmpp » Version: 0.9.6

cpe:2.3:a:process-one:exmpp:0.9.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-1753

Products

Pricing

Contact Us