Prosodical Thoughts Prosody Resource Management Error Vulnerability

Prosodical Thoughts Prosody is a Prosodical Thoughts open source application . A modern XMPP communication server . A security vulnerability exists in Prosody prior to version 0.11.9. An attacker could control CPU consumption through a large number of SSL/TLS renegotiation requests...

CVE-2017-18265

Prosody before 0.10.0 allows remote attackers to cause a denial of service application crash, related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in,...