CVE-2014-2742
Severity Score
7.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack.
Isode M-Link anterior a 16.0v7 no restringe debidamente el procesamiento de elementos XML comprimidos, lo que permite a atacantes remotos causar una denegación de servicio (consumo de recursos) a través de una cadena XMPP manipulada, también conocido como un ataque "xmppbomb".
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-04-08 CVE Reserved
- 2014-04-11 CVE Published
- 2024-02-22 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://openwall.com/lists/oss-security/2014/04/07/7 | Mailing List | |
| http://openwall.com/lists/oss-security/2014/04/09/1 | Mailing List | |
| http://xmpp.org/resources/security-notices/uncontrolled-resource-consumption-with-highly-compressed-xmpp-stanzas | X_refsource_misc |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Isode Search vendor "Isode" | M-link Search vendor "Isode" for product "M-link" | 14.6 Search vendor "Isode" for product "M-link" and version "14.6" | - |
Affected
| ||||||
| Isode Search vendor "Isode" | M-link Search vendor "Isode" for product "M-link" | 14.6.14 Search vendor "Isode" for product "M-link" and version "14.6.14" | - |
Affected
| ||||||
| Isode Search vendor "Isode" | M-link Search vendor "Isode" for product "M-link" | 15.1 Search vendor "Isode" for product "M-link" and version "15.1" | - |
Affected
| ||||||
| Isode Search vendor "Isode" | M-link Search vendor "Isode" for product "M-link" | 15.1.10 Search vendor "Isode" for product "M-link" and version "15.1.10" | - |
Affected
| ||||||
| Isode Search vendor "Isode" | M-link Search vendor "Isode" for product "M-link" | 16.0 Search vendor "Isode" for product "M-link" and version "16.0" | - |
Affected
| ||||||