Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-skgm-b471-pkae
SummaryProsody before 0.9.4 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbomb" attack, related to core/portmanager.lua and util/xmppstream.lua.
Aliases
0
alias CVE-2014-2745
Fixed_packages
0
url pkg:deb/debian/prosody@0.8.2-4%2Bdeb7u4
purl pkg:deb/debian/prosody@0.8.2-4%2Bdeb7u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jkq-68jn-vbf6
1
vulnerability VCID-7gng-znmd-fybz
2
vulnerability VCID-9fun-u67v-ukeg
3
vulnerability VCID-9hnj-qfwy-t7bz
4
vulnerability VCID-ape7-wbd4-f3fa
5
vulnerability VCID-bvnn-cwwk-5ug8
6
vulnerability VCID-d3u6-29xv-d3d7
7
vulnerability VCID-dqgn-tvzm-nyhq
8
vulnerability VCID-pf8t-h7qr-zke4
9
vulnerability VCID-qzwt-bgty-3bfr
10
vulnerability VCID-r361-cy8g-z7b3
11
vulnerability VCID-skgm-b471-pkae
12
vulnerability VCID-te5t-7g5g-h3h1
13
vulnerability VCID-v8a7-whdt-8yec
14
vulnerability VCID-yk2e-qwmd-r3hb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@0.8.2-4%252Bdeb7u4
1
url pkg:deb/debian/prosody@0.9.4-1?distro=trixie
purl pkg:deb/debian/prosody@0.9.4-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@0.9.4-1%3Fdistro=trixie
2
url pkg:deb/debian/prosody@0.9.7-2
purl pkg:deb/debian/prosody@0.9.7-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jkq-68jn-vbf6
1
vulnerability VCID-7gng-znmd-fybz
2
vulnerability VCID-9fun-u67v-ukeg
3
vulnerability VCID-9hnj-qfwy-t7bz
4
vulnerability VCID-ape7-wbd4-f3fa
5
vulnerability VCID-bvnn-cwwk-5ug8
6
vulnerability VCID-d3u6-29xv-d3d7
7
vulnerability VCID-dqgn-tvzm-nyhq
8
vulnerability VCID-pf8t-h7qr-zke4
9
vulnerability VCID-qzwt-bgty-3bfr
10
vulnerability VCID-r361-cy8g-z7b3
11
vulnerability VCID-v8a7-whdt-8yec
12
vulnerability VCID-yk2e-qwmd-r3hb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@0.9.7-2
3
url pkg:deb/debian/prosody@0.11.9-2%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/prosody@0.11.9-2%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3n9x-ukp7-3khs
1
vulnerability VCID-5zvg-gbkm-7fb4
2
vulnerability VCID-9q7k-rudh-fugc
3
vulnerability VCID-wxmn-zer8-afet
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@0.11.9-2%252Bdeb11u2%3Fdistro=trixie
4
url pkg:deb/debian/prosody@0.12.3-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/prosody@0.12.3-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@0.12.3-1%252Bdeb12u1%3Fdistro=trixie
5
url pkg:deb/debian/prosody@13.0.1-1%2Bdeb131u?distro=trixie
purl pkg:deb/debian/prosody@13.0.1-1%2Bdeb131u?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@13.0.1-1%252Bdeb131u%3Fdistro=trixie
6
url pkg:deb/debian/prosody@13.0.6-1?distro=trixie
purl pkg:deb/debian/prosody@13.0.6-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@13.0.6-1%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/prosody@0.7.0-1squeeze1
purl pkg:deb/debian/prosody@0.7.0-1squeeze1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jkq-68jn-vbf6
1
vulnerability VCID-7gng-znmd-fybz
2
vulnerability VCID-7zh2-6hq2-e7fn
3
vulnerability VCID-9fun-u67v-ukeg
4
vulnerability VCID-9hnj-qfwy-t7bz
5
vulnerability VCID-ape7-wbd4-f3fa
6
vulnerability VCID-bvnn-cwwk-5ug8
7
vulnerability VCID-d3u6-29xv-d3d7
8
vulnerability VCID-dqgn-tvzm-nyhq
9
vulnerability VCID-pf8t-h7qr-zke4
10
vulnerability VCID-qeey-pk5y-abc4
11
vulnerability VCID-qzwt-bgty-3bfr
12
vulnerability VCID-r361-cy8g-z7b3
13
vulnerability VCID-skgm-b471-pkae
14
vulnerability VCID-te5t-7g5g-h3h1
15
vulnerability VCID-v8a7-whdt-8yec
16
vulnerability VCID-yk2e-qwmd-r3hb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@0.7.0-1squeeze1
1
url pkg:deb/debian/prosody@0.7.0-1squeeze1%2Bdeb6u2
purl pkg:deb/debian/prosody@0.7.0-1squeeze1%2Bdeb6u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jkq-68jn-vbf6
1
vulnerability VCID-7gng-znmd-fybz
2
vulnerability VCID-7zh2-6hq2-e7fn
3
vulnerability VCID-9fun-u67v-ukeg
4
vulnerability VCID-9hnj-qfwy-t7bz
5
vulnerability VCID-ape7-wbd4-f3fa
6
vulnerability VCID-bvnn-cwwk-5ug8
7
vulnerability VCID-d3u6-29xv-d3d7
8
vulnerability VCID-dqgn-tvzm-nyhq
9
vulnerability VCID-pf8t-h7qr-zke4
10
vulnerability VCID-qeey-pk5y-abc4
11
vulnerability VCID-qzwt-bgty-3bfr
12
vulnerability VCID-r361-cy8g-z7b3
13
vulnerability VCID-skgm-b471-pkae
14
vulnerability VCID-te5t-7g5g-h3h1
15
vulnerability VCID-v8a7-whdt-8yec
16
vulnerability VCID-yk2e-qwmd-r3hb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@0.7.0-1squeeze1%252Bdeb6u2
2
url pkg:deb/debian/prosody@0.8.2-4%2Bdeb7u4
purl pkg:deb/debian/prosody@0.8.2-4%2Bdeb7u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jkq-68jn-vbf6
1
vulnerability VCID-7gng-znmd-fybz
2
vulnerability VCID-9fun-u67v-ukeg
3
vulnerability VCID-9hnj-qfwy-t7bz
4
vulnerability VCID-ape7-wbd4-f3fa
5
vulnerability VCID-bvnn-cwwk-5ug8
6
vulnerability VCID-d3u6-29xv-d3d7
7
vulnerability VCID-dqgn-tvzm-nyhq
8
vulnerability VCID-pf8t-h7qr-zke4
9
vulnerability VCID-qzwt-bgty-3bfr
10
vulnerability VCID-r361-cy8g-z7b3
11
vulnerability VCID-skgm-b471-pkae
12
vulnerability VCID-te5t-7g5g-h3h1
13
vulnerability VCID-v8a7-whdt-8yec
14
vulnerability VCID-yk2e-qwmd-r3hb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@0.8.2-4%252Bdeb7u4
3
url pkg:deb/debian/prosody@0.9.4-1~bpo70%2B1
purl pkg:deb/debian/prosody@0.9.4-1~bpo70%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6jkq-68jn-vbf6
1
vulnerability VCID-7gng-znmd-fybz
2
vulnerability VCID-9fun-u67v-ukeg
3
vulnerability VCID-9hnj-qfwy-t7bz
4
vulnerability VCID-ape7-wbd4-f3fa
5
vulnerability VCID-bvnn-cwwk-5ug8
6
vulnerability VCID-d3u6-29xv-d3d7
7
vulnerability VCID-dqgn-tvzm-nyhq
8
vulnerability VCID-pf8t-h7qr-zke4
9
vulnerability VCID-qzwt-bgty-3bfr
10
vulnerability VCID-r361-cy8g-z7b3
11
vulnerability VCID-skgm-b471-pkae
12
vulnerability VCID-te5t-7g5g-h3h1
13
vulnerability VCID-v8a7-whdt-8yec
14
vulnerability VCID-yk2e-qwmd-r3hb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@0.9.4-1~bpo70%252B1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-2745
reference_id
reference_type
scores
0
value 0.02179
scoring_system epss
scoring_elements 0.8466
published_at 2026-06-04T12:55:00Z
1
value 0.02179
scoring_system epss
scoring_elements 0.84684
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-2745
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2744
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2744
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2745
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2745
Weaknesses
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-skgm-b471-pkae