CVE-2011-4320

no score yetEPSS 2.0%

The mod_pubsub module (mod_pubsub.erl) in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service (infinite loop) via a stanza with a publish tag that lacks a node attribute.

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2012-02-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

process-one:ejabberd

References

http://secunia.com/advisories/46915
http://www.openwall.com/lists/oss-security/2011/11/19/1
http://www.openwall.com/lists/oss-security/2011/11/19/2
http://www.osvdb.org/77302
http://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_2.1.9

Check your stack JSON