CVE-2010-0305: ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon cras...

Security readout for executives and security teams

CVE-2010-0305 is a denial-of-service issue in ejabberd before 2.1.3. A remote actor could overload client-to-server message queues and crash the daemon, disrupting XMPP chat service. The source bundle does not provide CVSS, CWE, or evidence of active exploitation. Exposure is most likely for organizations still running ejabberd before 2.1.3, especially internet-facing XMPP services accepting client connections. Modern deployments on supported ejabberd versions are less likely exposed. Structured affected-product data in the bundle is incomplete. Prioritize remediation if ejabberd supports business communication or is internet-facing. The main risk is service outage, not confirmed compromise. Because the issue is old, unresolved exposure usually indicates unsupported infrastructure that should be upgraded or retired. Mitigation focus: Inventory ejabberd deployments and identify versions before 2.1.3.; Upgrade ejabberd to 2.1.3 or a vendor-supported fixed release.; Apply Debian or distribution security updates where applicable..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.