CVE-2010-0305
UnknownEPSS 3.10%
Last modified
CVE-2010-0305 is a vulnerability of currently unknown severity. ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka client2server) messages that trigger a queue overload.. EPSS estimates a 3.10% chance of exploitation in the next 30 days.
Description
ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka client2server) messages that trigger a queue overload.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Process-One | Ejabberd | <= 2.1.2 |
| Process-One | Ejabberd | 0.9 |
| Process-One | Ejabberd | 0.9.1 |
| Process-One | Ejabberd | 0.9.8 |
| Process-One | Ejabberd | 1.0.0 |
| Process-One | Ejabberd | 1.1.0 |
| Process-One | Ejabberd | 1.1.1 |
| Process-One | Ejabberd | 1.1.1.0 |
| Process-One | Ejabberd | 1.1.1.1 |
| Process-One | Ejabberd | 1.1.2 |
| Process-One | Ejabberd | 1.1.3 |
| Process-One | Ejabberd | 1.1.14 |
| Process-One | Ejabberd | 2.0.0 |
| Process-One | Ejabberd | 2.0.1_2 |
| Process-One | Ejabberd | 2.0.2 |
| Process-One | Ejabberd | 2.0.3 |
| Process-One | Ejabberd | 2.0.4 |
| Process-One | Ejabberd | 2.0.5 |
| Process-One | Ejabberd | 2.1.0 |
| Process-One | Ejabberd | 2.1.1 |
References
- http://secunia.com/advisories/38337Vendor Advisory
- http://secunia.com/advisories/38337Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-0305?
ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka client2server) messages that trigger a queue overload.
How severe is CVE-2010-0305?
Severity scoring for CVE-2010-0305 is pending analysis. The EPSS model estimates a 3.10% probability of exploitation in the next 30 days.
How do I fix CVE-2010-0305?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-0299openSUSE 11.2 installs the devtmpfs root directory with inse…
- CVE-2010-0300cache.c in ircd-ratbox before 2.2.9 allows remote attackers …
- CVE-2010-0301main.C in maildrop 2.3.0 and earlier, when run by root with …
- CVE-2010-0302Use-after-free vulnerability in the abstract file-descriptor…7.5
- CVE-2010-0303mystring.c in hybserv in IRCD-Hybrid (aka Hybrid2 IRC Servic…
- CVE-2010-0304Multiple buffer overflows in the LWRES dissector in Wireshar…
- CVE-2010-0306The x86 emulator in KVM 83, when a guest is configured for S…
- CVE-2010-0307The load_elf_binary function in fs/binfmt_elf.c in the Linux…
- CVE-2010-0308lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.…
- CVE-2010-0309The pit_ioport_read function in the Programmable Interval Ti…
- CVE-2010-0310Trusted Extensions in Sun Solaris 10 allows local users to g…
- CVE-2010-0311Unspecified vulnerability in Sun Java System Identity Manage…
Are you affected by CVE-2010-0305?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST