CVE-2014-2829

Name of the Vulnerable Software and Affected Versions Erlang Solutions MongooseIM versions prior to 1.3.1 rev. 2

Description The issue allows remote attackers to cause a denial of service due to improper restriction of the processing of compressed XML elements. This can be achieved via a crafted XMPP stream, also known as an "xmppbomb" attack.

Recommendations For versions prior to 1.3.1 rev. 2, update to a version that properly restricts the processing of compressed XML elements to prevent denial of service attacks.