Unscored severity · published Jun 22, 2011
CVE-2011-2531
Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of service (data truncation) by sending a large amount of data.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PR
Prosody · Prosody
0.8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2531
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2531
Patch
http://blog.prosody.im/prosody-0-8-1-released/
Patch
http://hg.prosody.im/0.8/rev/c806a599224a
Patch
http://hg.prosody.im/0.8/rev/d2406f0ce8a5
Patch
http://prosody.im/doc/release/0.8.1
More from Prosody
8.8
CVE-2018-10847
prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass
7.5
CVE-2026-43507
An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5
7.5
CVE-2026-43506
An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5
7.5
CVE-2022-0217
It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data
7.5
CVE-2021-37601
muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a Multi-User chat…