CVEvulnerability

CVE-2011-2532

5.0 MEDIUM Published 2011-06-22 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2011-06-22
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses: CWE-399

Description

The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of service (infinite loop) via invalid JSON data, as demonstrated by truncated data.

Affected configurations

• prosody prosody 0.8.0

Weakness · not in database (1)

CWE-399

References

http://blog.prosody.im/prosody-0-8-1-released/ Patch
http://hg.prosody.im/0.8/rev/20979f124ad9 Patch
http://prosody.im/doc/release/0.8.1 Patch
http://blog.prosody.im/prosody-0-8-1-released/ Patch
http://hg.prosody.im/0.8/rev/20979f124ad9 Patch
http://prosody.im/doc/release/0.8.1 Patch

CVE-2011-2532

Description

Affected configurations

Related

Weakness · not in database (1)

References