VDB

GCVE-110-CERTCC-2014-495476

GCVE-110-CERTCC-2014-495476
Advisory PublishedCVSS 7.8/10
Vulnetix · Advisory published April 16, 2014
Openfire 3.9.1, and possibly earlier versions, contains an uncontrolled resource consumption (CWE-400) vulnerability when using XMPP DEFLATE message compression.
Download JSON Open in Console

Risk Scores

CVSS 2.0
7.8/10
High · AV:N/AC:L/Au:N/C:N/I:N/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score7remediation_levelWreport_confidenceCenvironmental_score5.2704127854target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2014-2741

Transitive aliases

GHSA-j5qh-cp3p-2h87GSD-2014-2741

References

Openfire contains an uncontrolled resource consumption vulnerability
url
Openfire contains an uncontrolled resource consumption vulnerability
url
Openfire contains an uncontrolled resource consumption vulnerability
url
Openfire contains an uncontrolled resource consumption vulnerability
url
Openfire contains an uncontrolled resource consumption vulnerability
url
Openfire contains an uncontrolled resource consumption vulnerability
advisory

Browse GCVE Records

73,053 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›