CVE-2014-2750 in Prosody
Summary
Prosody before 0.9.4, when mod_compression is enabled, allows remote attackers to cause a denial of service (resource consumption) via compressed XML elements in an XMPP stream, aka "zip bomb" attack.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
04/10/2014
Disclosure
04/10/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 66924 | Prosody mod_compression input validation | 20 | Not defined | Official fix | CVE-2014-2750 |