PT-2014-4911
CVE-2014-2829
·
تاريخ النشر
2014-04-11
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 4.0
8.7
عاليةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Erlang Solutions MongooseIM versions prior to 1.3.1 rev. 2
Description
The issue allows remote attackers to cause a denial of service due to improper restriction of the processing of compressed XML elements. This can be achieved via a crafted XMPP stream, also known as an "xmppbomb" attack.
Recommendations
For versions prior to 1.3.1 rev. 2, update to a version that properly restricts the processing of compressed XML elements to prevent denial of service attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾