VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 21, 2011· Updated Jun 16, 2026

CVE-2011-1757

CVE-2011-1757

Description

DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Brad Fitzpatrick/Djabberd5 versions
    cpe:2.3:a:brad_fitzpatrick:djabberd:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:brad_fitzpatrick:djabberd:*:*:*:*:*:*:*:*range: <=0.84
    • cpe:2.3:a:brad_fitzpatrick:djabberd:0.80:*:*:*:*:*:*:*
    • cpe:2.3:a:brad_fitzpatrick:djabberd:0.81:*:*:*:*:*:*:*
    • cpe:2.3:a:brad_fitzpatrick:djabberd:0.82:*:*:*:*:*:*:*
    • cpe:2.3:a:brad_fitzpatrick:djabberd:0.83:*:*:*:*:*:*:*
  • Djabberd/DJabberdllm-fuzzy
    Range: <=0.84

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.