CVE-2014-2829

Published: Apr 11, 2014

Modified: Sep 17, 2024

PUBLISHED

Description

Erlang Solutions MongooseIM through 1.3.1 rev. 2 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://xmpp.org/resources/security-notices/uncontrolled-resource-consumption-with-highly-compressed-xmpp-stanzas/

x_refsource_MISC

https://github.com/esl/MongooseIM/commit/586d96cc12ef218243a3466354b4d208b5472a6c

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2014-2829

Description

Affected Products

References