CVE-2011-1754

Published: Jun 21, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

Affected (8)

Products: Jabberd: Jabberd14

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Jabberd Jabberd14	version ≤ 1.6.1.1
Jabberd Jabberd14	Version 1.4.1
Jabberd Jabberd14	Version 1.4.2
Jabberd Jabberd14	Version 1.4.3.1
Jabberd Jabberd14	Version 1.4.3
Jabberd Jabberd14	Version 1.4.4
Jabberd Jabberd14	Version 1.6.0
Jabberd Jabberd14	Version 1.6.1

Related CWEs

References (10)

http://packages.debian.org/changelogs/pool/main/j/jabberd14/jabberd14_1.6.1.1-5+squeeze1/changelog

Source: secalert@redhat.com

http://secunia.com/advisories/44795

Source: secalert@redhat.com

Vendor Advisory

http://www.debian.org/security/2011/dsa-2249

Source: secalert@redhat.com

http://www.securityfocus.com/bid/48070

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/67771

Source: secalert@redhat.com

http://packages.debian.org/changelogs/pool/main/j/jabberd14/jabberd14_1.6.1.1-5+squeeze1/changelog

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44795

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.debian.org/security/2011/dsa-2249

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/48070

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/67771

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.