VULNERABILITY INTELLIGENCE

CVE-2010-0305

CVSS score5 MEDIUM
EPSS probability3.10%
CISA KEVNot currently listed
Published2010-02-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka client2server) messages that trigger a queue overload.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references