CVE-2017-10807

概要

参考情報

• debian.org/security/2017/dsa-3902
• securityfocus.com/bid/99511 · Third Party Advisory
• bugs.debian.org/867032 · Third Party Advisory
• jabberd2/jabberd2 commit 8416ae5 · Third Party Advisory
• jabberd2/jabberd2 release jabberd-2.6.1 · Third Party Advisory

jabberd2 のその他の脆弱性

• CVE-2017-18226中 5.5The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users …
• CVE-2017-18225高 7.8The Gentoo net-im/jabberd2 package through 2.6.1 installs jabberd, jabberd2-c2s, jabberd2-router, jabberd2-s2s, and jabberd2-sm in /usr/bin …
• CVE-2015-2058中 6.5c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authent…
• CVE-2012-3525中 5.8s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote X…
• CVE-2011-1755高 7.5jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of servic…