Prosody XMPP Server CVE-2014-2745 XMPP-Layer Compression Denial of Service Vulnerability
BID:66724
Info
Prosody XMPP Server CVE-2014-2745 XMPP-Layer Compression Denial of Service Vulnerability
| Bugtraq ID: | 66724 |
| Class: | Design Error |
| CVE: |
CVE-2014-2745 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 07 2014 12:00AM |
| Updated: | May 07 2015 05:16PM |
| Credit: | Giancarlo Pellegrino |
| Vulnerable: |
Prosody Prosody 0.9 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
Prosody Prosody 0.9.4 |
Discussion
Prosody XMPP Server CVE-2014-2745 XMPP-Layer Compression Denial of Service Vulnerability
Prosody XMPP server implementation is prone to a remote denial-of-service vulnerability.
Exploiting this issue allows remote attackers to trigger denial-of-service conditions due to excessive CPU consumption.
Prosody XMPP server implementation is prone to a remote denial-of-service vulnerability.
Exploiting this issue allows remote attackers to trigger denial-of-service conditions due to excessive CPU consumption.
Exploit / POC
Prosody XMPP Server CVE-2014-2745 XMPP-Layer Compression Denial of Service Vulnerability
Attackers can exploit this issue using readily available tools.
Attackers can exploit this issue using readily available tools.
Solution / Fix
Prosody XMPP Server CVE-2014-2745 XMPP-Layer Compression Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Prosody XMPP Server CVE-2014-2745 XMPP-Layer Compression Denial of Service Vulnerability
References:
References: