| Package | Affected versions | Patched versions |
|---|---|---|
| jabberd14 | = 1.4.1= 1.4.2= 1.4.3= 1.4.3.1= 1.4.4= 1.6.0= 1.6.1≤ 1.6.1.1 |
jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free