CVE-2014-2746

net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...

CVE-2014-2746

The CVE-2014-2746 issue affects Tigase before version 5.2.1, where net/IOService.java inadequately restricts processing of compressed XML elements. This allows remote attackers to trigger resource consumption and potential denial of service via a crafted XMPP stream (xmppbomb). The vulnerability ...

CVE-2014-2746

net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...