There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4
    negotiates stream compression while a session is unauthenticated, which allows remote attackers to cause a
    denial of service (resource consumption) via compressed XML elements in an XMPP stream, aka an "xmppbomb"
    attack. (CVE-2014-2744)

  - Prosody before 0.9.4 does not properly restrict the processing of compressed XML elements, which allows
    remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an
    "xmppbomb" attack, related to core/portmanager.lua and util/xmppstream.lua. (CVE-2014-2745)

添加了上游修补程序以避免使用 XMPP application-layer 压缩时的资源消耗拒绝服务 (#1085692)

请注意，Tenable Network Security 已直接从 Fedora 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

已新增上游修補程式，以避免使用 XMPP 應用程式層壓縮時導致的資源消耗拒絕服務 (#1085692)

請注意，Tenable Network Security 已直接從 Fedora 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

XMPP アプリケーションレイヤー圧縮を使用する際のリソース消費によるサービス拒否を回避するために、Upstream パッチを追加しました（#1085692）

注意：Tenable Network Security は、前述の記述ブロックを Fedora セキュリティアドバイザリから直接抽出しています。Tenable では、できる限り新たな問題を持ち込まないように、自動的に整理して書式設定するようにしています。

Added upstream patches to avoid resource consumption denial of service when using XMPP application-layer compression (#1085692)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
401085	Alpine: multiple prosody packages: security update to 0.9.1-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	high
401085	Alpine: multiple prosody packages: security update to 0.9.1-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	high
73846	Fedora 19：prosody-0.8.2-11.fc19 (2014-5586)	Nessus	Fedora Local Security Checks	2014/5/3	2021/1/11	high
73846	Fedora 19：prosody-0.8.2-11.fc19 (2014-5586)	Nessus	Fedora Local Security Checks	2014/5/3	2021/1/11	high
73846	Fedora 19：prosody-0.8.2-11.fc19（2014-5586）	Nessus	Fedora Local Security Checks	2014/5/3	2021/1/11	high
73846	Fedora 19 : prosody-0.8.2-11.fc19 (2014-5586)	Nessus	Fedora Local Security Checks	2014/5/3	2021/1/11	high

检测

插件搜索

high

high

high

high

high

high