tocsin

Debian/prosody: unknown

Prosody before 0.9.4 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream,

Action: Upgrade prosody to 0.9.4-1 or later.

Affected

introducedfixedlast affected
00.9.4-1-

Fixed versions

0.9.4-1

Sources

published · modified · JSON