Jabberd2
6 CVEs across 1 Jabberd2 products. Browse Jabberd2 vulnerabilities, severities, and proof-of-concept exploits.
Jabberd2 products with known CVEs
Jabberd2 CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2017-18226 | Medium | 5.5 | 2018-03-12 | The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users to kill arbitrary p… |
CVE-2017-18225 | High | 7.8 | 2018-03-12 | The Gentoo net-im/jabberd2 package through 2.6.1 installs jabberd, jabberd2-c2s, jabberd2-router, jabberd2-s2s, and jabberd2-sm in /usr/bin owned by the jabber… |
CVE-2017-10807 | Critical | 9.8 | 2017-07-04 | JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled. |
CVE-2015-2058 | | | 2015-08-12 | c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to rea… |
CVE-2012-3525 | | | 2012-08-25 | s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoo… |
CVE-2011-1755 | High | 7.5 | 2011-06-21 | jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU c… |