CVE:CVE-2021-32920
CNNVD:CNNVD-202105-840
Prosodical Thoughts Prosody是Prosodical Thoughts开源的一个应用系统。一个现代XMPP通信服务器。
Prosodical Thoughts Prosody 0.11.9版本之前存在安全漏洞。攻击者可以通过大量SSL/TLS重新协商请求来控制CPU消耗。
solution:Upgrade prosody prosody to a higher version than 0.11.9,and avoid the version (,0.11.9); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade fedoraproject fedora to a higher version than 32,33,34,and avoid the version 32,33,34