Vulnerability in Erlang-Solutions Mongooseim
CVE-2014-2829
Erlang Solutions MongooseIM through 1.3.1 rev. 2 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack.
EPSS: 0.020 (78.8th percentile) — read the EPSS interpretation.
Affected products
- Erlang-solutions Mongooseim — versions 1.2.1, 1.2.2, 1.3.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch)