Known vulnerabilities in prosody (Debian package) 0.11.5-1~bpo10+1

Vendor: Debian
Version: 0.11.5-1~bpo10+1
Software CPE: cpe:2.3:o:debian:prosody_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting prosody (Debian package) version 0.11.5-1~bpo10+1 prosody (Debian package) 0.11.5-1~bpo10+1 is affected by 6 vulnerabilities: 5 medium, 1 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59655 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2022-0217
CWE-776 Medium
Public exploit available
No
0.11.2-1+deb10u3, 0.11.9-2+deb11u1 17.01.2022 SB2022011716
SB2022011728
SB2022011420
and 4 more
#VU53316 - Resource exhaustion
CVE-2021-32918
CWE-400 Medium
No
No
0.11.2-1+deb10u1 17.05.2021 SB2021051714
SB2021051905
SB2021051924
and 6 more
#VU53315 - Improper Authentication
CVE-2021-32919
CWE-287 Medium
No
No
0.11.2-1+deb10u1 17.05.2021 SB2021051714
SB2021051905
SB2021051924
and 6 more
#VU53314 - Improper Authorization
CVE-2021-32917
CWE-285 Medium
No
No
0.11.2-1+deb10u1 17.05.2021 SB2021051714
SB2021051905
SB2021051924
and 6 more
#VU53313 - Information Exposure Through Timing Discrepancy
CVE-2021-32921
CWE-208 Low
No
No
0.11.2-1+deb10u1 17.05.2021 SB2021051714
SB2021051905
SB2021051924
and 6 more
#VU53312 - Resource exhaustion
CVE-2021-32920
CWE-400 Medium
No
No
0.11.2-1+deb10u1 17.05.2021 SB2021051714
SB2021051905
SB2021051924
and 6 more