The 'ejabberd' application is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Versions prior to ejabberd 2.1.3 are vulnerable other versions may also be affected.

The vendor has released an update. Please see the references for details.

• http://www.process-one.net/en/ejabberd/
• http://www.securityfocus.com/bid/38003
• https://support.process-one.net/browse/EJAB/fixforversion/10453

---

Updated on 2015-03-25