| Package | Affected versions | Patched versions |
|---|---|---|
| jabberd | = 1.4= 1.4.1= 1.4.2= 1.4.2a= 1.4.3 | |
| jadc2s | = 0.6= 0.7= 0.8= 0.9 |
The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free