NVD

Id
24229  
Name
CVE-2015-2058  
Description
c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-08-12  
Modified Date
2016-11-29  
Seq
2015-2058  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
128331 24229 CVE-2015-2058 [oss-security] 20150209 CVE Request: jabberd remote information disclosure  View
128332 24229 CVE-2015-2058 [oss-security] 20150223 Re: CVE Request: jabberd remote information disclosure  View
128333 24229 CVE-2015-2058 72731  View
128334 24229 CVE-2015-2058 https://github.com/jabberd2/jabberd2/issues/85  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8741 JVNDB-2015-004061 Jabber オープンソースサーバの c2s/c2s.c におけるシステムメモリを読まれる脆弱性 Jabber オープンソースサーバの c2s/c2s.c は、UTF-8 が有効なままであることを確認せずにデータを切り捨てるため、システムメモリを読まれるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-2058 79283 CVE-2015-2058 24229 6.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004061.html 2015-02-09 2015-08-13 View