CVE-2011-2532 — Vulnetix

CVE-2011-2532 PUBLISHED CVSS 5 MEDIUM

The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of service (infinite loop) via invalid JSON data, as demonstrated by truncated data.

EPSS 0.54% · 67.8th percentile

Risk Scores

CVSS 2.0

EPSS Score

0.54%

67.8th percentile

Affected Products

Vendor	Product	Versions
n/a	n/a	*
prosody	prosody	0.8.0

Timeline

Jun 22, 2011 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
May 20, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 26, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Feb 9, 2023 EPSS Score
Apr 2, 2023 EPSS Score
May 25, 2023 EPSS Score
Jul 17, 2023 EPSS Score

References

http://blog.prosody.im/prosody-0-8-1-released/ url
http://hg.prosody.im/0.8/rev/20979f124ad9 url
http://prosody.im/doc/release/0.8.1 url
https://nvd.nist.gov/vuln/detail/CVE-2011-2532 advisory
http://blog.prosody.im/prosody-0-8-1-released url

Open in Interactive Console →