Multiple Vendors XMPP Server XMPP-Layer Compression Denial of Service Vulnerability
BID:66670
Info
Multiple Vendors XMPP Server XMPP-Layer Compression Denial of Service Vulnerability
| Bugtraq ID: | 66670 |
| Class: | Design Error |
| CVE: |
CVE-2014-2746 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 04 2014 12:00AM |
| Updated: | Apr 17 2014 01:02AM |
| Credit: | Giancarlo Pellegrino |
| Vulnerable: |
Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
Multiple Vendors XMPP Server XMPP-Layer Compression Denial of Service Vulnerability
Multiple vendors XMPP server implementation is prone to a remote denial-of-service vulnerability.
Exploiting this issue allows remote attackers to trigger denial-of-service conditions due to excessive CPU consumption.
Multiple vendors XMPP server implementation is prone to a remote denial-of-service vulnerability.
Exploiting this issue allows remote attackers to trigger denial-of-service conditions due to excessive CPU consumption.
Exploit / POC
Multiple Vendors XMPP Server XMPP-Layer Compression Denial of Service Vulnerability
Attackers can exploit this issue using readily available tools.
Attackers can exploit this issue using readily available tools.
Solution / Fix
Multiple Vendors XMPP Server XMPP-Layer Compression Denial of Service Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Multiple Vendors XMPP Server XMPP-Layer Compression Denial of Service Vulnerability
References:
References: