CVE-2011-1755: Apple Mac OS X

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

Affected products

• Apple Mac OS X: before 10.6.8 (fixed in 10.6.8); from 10.7.0, before 10.7.2 (fixed in 10.7.2)
• Apple Mac OS X Server: before 10.6.8 (fixed in 10.6.8); from 10.7.0, before 10.7.2 (fixed in 10.7.2)
• Fedoraproject Fedora: version 13 only; version 14 only; version 15 only
• JABBERD2 JABBERD2: before 2.2.14 (fixed in 2.2.14)

Published 2011-06-21. Last modified 2026-06-16.