CVE-2021-32917
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-32917
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by default, even if neither of the users has an XMPP account on the local server, allowing unrestricted use of the server's bandwidth.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Prosodical Thoughts Prosody 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Prosodical Thoughts Prosody是Prosodical Thoughts开源的一个应用系统。一个现代XMPP通信服务器。 Prosody 0.11.9版本之前存在安全漏洞。远程攻击者可以利用该漏洞无限制地使用服务器的带宽。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2021-32917
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-32917
请登录查看更多情报信息。
Vendor Advisories for CVE-2021-32917 (2)
- https://security.gentoo.org/glsa/202105-15x_refsource_MISC
Mailing List Discussions for CVE-2021-32917 (6)
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MFFBZWXKPZEVZNQSVJNCUE7WRF3T7DG/vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUN63AHEWB2WRROJHU3BVJRWLONCT2B7/vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWJ2DG2DFJOEFEWOUN26IMYYWGSA2ZEE/vendor-advisoryx_refsource_FEDORA
Security Blog Posts for CVE-2021-32917 (1)
- https://blog.prosody.im/prosody-0.11.9-released/x_refsource_MISC
Same Patch Batch · n/a · 2021-05-13 · 36 CVEs total
| CVE-2021-23909 | 6.3 MEDIUM | Mercedes Benz HERMES E Series 缓冲区错误漏洞 |
| CVE-2021-23910 | 5.3 MEDIUM | Mercedes Benz HERMES 缓冲区错误漏洞 |
| CVE-2021-23908 | 2.9 LOW | Mercedes-Benz AG MBUX Infotainment System 安全漏洞 |
| CVE-2021-23907 | 2.9 LOW | Mercedes-Benz AG MBUX Infotainment System 输入验证错误漏洞 |
| CVE-2021-23906 | 1.8 LOW | Mercedes-Benz AG MBUX Infotainment System 输入验证错误漏洞 |
| CVE-2021-25693 | Teradici PCoIP Graphics Agent 代码问题漏洞 | |
| CVE-2020-25713 | Red Hat Enterprise Linux 缓冲区错误漏洞 | |
| CVE-2020-27830 | Linux kernel 代码问题漏洞 | |
| CVE-2020-28063 | ArticleCMS 代码问题漏洞 | |
| CVE-2020-20092 | ArticleCMS 代码问题漏洞 | |
| CVE-2020-27823 | OpenJPEG 缓冲区错误漏洞 | |
| CVE-2020-27824 | OpenJPEG 缓冲区错误漏洞 | |
| CVE-2020-14354 | Fedora 资源管理错误漏洞 | |
| CVE-2021-20250 | Red Hat JBoss EJB Client 信息泄露漏洞 | |
| CVE-2021-32919 | Prosodical Thoughts Prosody 信任管理问题漏洞 | |
| CVE-2021-25694 | Teradici PCoIP Graphics Agent 代码问题漏洞 | |
| CVE-2021-22154 | Blackberry BlackBerry UEM 信息泄露漏洞 | |
| CVE-2021-22153 | Blackberry BlackBerry UEM 安全漏洞 | |
| CVE-2021-22152 | Blackberry BlackBerry UEM 输入验证错误漏洞 | |
| CVE-2021-31215 | Schedmd SchedMD Slurm 安全漏洞 |
Showing top 20 of 36 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2021-32917
No comments yet