Debian/ejabberd: unknown
ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka client2server) messages that trigger a queue overload.
Action: Upgrade ejabberd to 2.1.2-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.2-2 | - |
Fixed versions
| 2.1.2-2 |
Sources
- osv: DEBIAN-CVE-2010-0305#Debian:13/ejabberd
- https://security-tracker.debian.org/tracker/CVE-2010-0305
published · modified · JSON