Red Hat Security Advisory 2011-0881-01

Red Hat Security Advisory 2011-0881-01 – This package provides jabberd 2, an Extensible Messaging and Presence Protocol server used for XML based communication. It was found that the jabberd daemon did not properly detect recursion during entity expansion. A remote attacker could provide a specially-crafted XML file containing a large number of nested entity references, which once processed by the jabberd daemon, could lead to a denial of service.

Source: Red Hat Security Advisory 2011-0881-01