CVE-2015-2058

State: Published
Severity: Not scored
Published: Aug 12, 2015
Updated: Aug 6, 2024
Reserved: Feb 23, 2015

Description

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://github.com/jabberd2/jabberd2/issues/85
[oss-security] 20150209 CVE Request: jabberd remote information disclosuremailing-list
[oss-security] 20150223 Re: CVE Request: jabberd remote information disclosuremailing-list
72731vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.