Code injection

Prosody before 0.10.0 allows remote attackers to cause a denial of service application crash, related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in,...

PT-2018-6790

Name of the Vulnerable Software and Affected Versions: Prosody versions prior to 0.10.0 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is related to an incompatibility with certain versions of the LuaSocket library. An attacker...