VDB
CVE-2021-41055
CVE-2021-41055
PUBLISHED
CVSS 7.5 HIGH
Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last Message Correction (XEP-0308) message in multi-user chat, where the message ID equals the correction ID.
EPSS 1.57% · 75.1th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
1.57%
75.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| gajim | gajim | 1.2.0 |
Timeline
- Oct 11, 2021 EPSS Score
- Oct 11, 2021 CVE Published
- Dec 7, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 28, 2022 EPSS Score
- Jul 25, 2022 EPSS Score
- Sep 20, 2022 EPSS Score
- Nov 16, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 11, 2023 EPSS Score
- May 7, 2023 EPSS Score