Search CVE reports
1 – 10 of 23 results
(An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13. ...)
1 affected package
prosody
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| prosody | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
(An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13. ...)
1 affected package
prosody
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| prosody | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
(An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13. ...)
1 affected package
prosody
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| prosody | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
(An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13. ...)
1 affected package
prosody
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| prosody | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity...
1 affected package
prosody
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| prosody | Needs evaluation | Needs evaluation | Needs evaluation | Ignored | Ignored |
muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a Multi-User chat room) in some common configurations.
1 affected package
prosody
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| prosody | Not affected | Not affected | Not affected | Ignored | Ignored |
An issue was discovered in Prosody before 0.11.9. It does not use a constant-time algorithm for comparing certain secret strings when running under Lua 5.2 or later. This can potentially be used in a timing attack to reveal the...
1 affected package
prosody
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| prosody | Not affected | Not affected | Vulnerable | Vulnerable | Vulnerable |
Prosody before 0.11.9 allows Uncontrolled CPU Consumption via a flood of SSL/TLS renegotiation requests.
1 affected package
prosody
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| prosody | Not affected | Not affected | Vulnerable | Vulnerable | Vulnerable |
An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback option in mod_dialback enables an experimental feature for server-to-server authentication. It does not correctly authenticate remote...
1 affected package
prosody
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| prosody | Not affected | Not affected | Vulnerable | Vulnerable | Vulnerable |
An issue was discovered in Prosody before 0.11.9. Default settings are susceptible to remote unauthenticated denial-of-service (DoS) attacks via memory exhaustion when running under Lua 5.2 or Lua 5.3.
1 affected package
prosody
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| prosody | Not affected | Not affected | Vulnerable | Vulnerable | Vulnerable |