CVE-2011-1754: Medium severity jabberd 14 vulnerability
jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1754?
CVE-2011-1754 is classified as a denial of service vulnerability due to improper recursion detection during entity expansion.
How do I fix CVE-2011-1754?
To fix CVE-2011-1754, you should upgrade to jabberd14 version 1.6.1.2 or later, which addresses this vulnerability.
What software versions are affected by CVE-2011-1754?
CVE-2011-1754 affects jabberd14 versions up to and including 1.6.1.1.
What type of attack can be executed using CVE-2011-1754?
An attacker can exploit CVE-2011-1754 by sending a specially crafted XML document with deeply nested entity references to cause excessive memory and CPU consumption.
Is CVE-2011-1754 a local or remote vulnerability?
CVE-2011-1754 is a remote vulnerability, allowing attackers to execute denial of service attacks from a remote location.