Vulnerability in Isode M-Link

CVE-2014-2742

Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack.

EPSS: 0.018 (76.2th percentile) — read the EPSS interpretation.

Affected products

  • Isode M-link — versions 14.6, 14.6.14, 15.1
  • N/a — versions n/a

Weakness classification (CWE)

References