[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-2895-2 prosody -- prosody

ID: oval:org.secpod.oval:def:601267Date: (C)2014-07-21   (M)2022-10-10
Class: PATCHFamily: unix




The update for prosody in DSA 2895 caused a regression when a client logins with the compression functionality activated. This update corrects that problem. For reference, the original advisory text follows. A denial-of-service vulnerability has been reported in Prosody, a XMPP server. If compression is enabled, an attacker might send highly-com- pressed XML elements over XMPP streams and consume all the resources of the server.

Platform:
Debian 7.0
Product:
prosody
Reference:
DSA-2895-2
CVE-2014-2744
CVE-2014-2745
CVE    2
CVE-2014-2744
CVE-2014-2745
CPE    22
cpe:/o:debian:debian_linux:7.x
cpe:/a:prosody:prosody
cpe:/a:prosody:prosody:0.9.3
cpe:/a:prosody:prosody:0.8.2
...

© SecPod Technologies