tocsin

Debian/jabberd2: unknown

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other un

Action: Upgrade jabberd2 to 2.3.3-1 or later.

Affected

introducedfixedlast affected
02.3.3-1-

Fixed versions

2.3.3-1

Sources

published · modified · JSON