CVE-2011-1753: expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properl...

Security readout for executives and security teams

This CVE affects older ejabberd and exmpp XML handling. A remote attacker could send malicious XML that consumes excessive memory and CPU, potentially making an XMPP service unavailable. The sources describe denial of service only, not data theft or system takeover. Exposure is most relevant to organizations still running affected ejabberd or exmpp versions, especially internet-facing XMPP services that parse untrusted XML traffic. Current exposure depends on deployed versions and distribution backports. Address during normal vulnerability remediation unless XMPP availability is business-critical or the service is exposed to the internet. Escalate if affected versions remain externally reachable. Mitigation focus: Upgrade ejabberd to 2.1.7 or a later fixed release.; Upgrade exmpp to 0.9.7 or a later fixed release.; Check Debian, Fedora, or vendor package advisories for backported fixes..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.