Lucene search
Ubuntu.comUB:CVE-2014-2744HistoryApr 11, 2014 - 12:00 a.m.
CVE-2014-2744
2014-04-1100:00:00
ubuntu.com
ubuntu.com
9
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.032 Low
EPSS
Percentile
91.0%
plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch
Metronome through 3.4 negotiates stream compression while a session is
unauthenticated, which allows remote attackers to cause a denial of service
(resource consumption) via compressed XML elements in an XMPP stream, aka
an “xmppbomb” attack.
Related
debiancve
debiancve
CVE-2014-2744
2014-04-11 01:55:00
prion
prion
Design/Logic Flaw
2014-04-11 01:55:00
Design/Logic Flaw
2014-04-10 20:55:00
cve
cve
CVE-2014-2744
2014-04-11 01:55:00
CVE-2014-2750
2014-04-10 20:55:00
osv
osv
prosody - security update
2014-04-06 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: prosody-0.8.2-11.fc19
2014-05-02 20:56:38
openvas
openvas
Fedora Update for prosody FEDORA-2014-5586
2014-05-05 00:00:00
Debian Security Advisory DSA 2895-1 (prosody - security update)
2014-04-06 00:00:00
Fedora Update for prosody FEDORA-2014-5586
2014-05-05 00:00:00
nessus
nessus
Fedora 19 : prosody-0.8.2-11.fc19 (2014-5586)
2014-05-03 00:00:00
debian
debian
[SECURITY] [DSA 2895-2] prosody regression update
2014-04-20 23:42:59
seebug
seebug
Prosody XML解压缩拒绝服务漏洞
2014-04-11 00:00:00
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.032 Low
EPSS
Percentile
91.0%
Related for UB:CVE-2014-2744