CVE-2014-0364

概要

参考情報

• community.igniterealtime.org/blogs/ignite/2014/04/17/asmack-400-rc1-has-been-released · Vendor Advisory
• rhn.redhat.com/errata/RHSA-2015-1176.html · Third Party Advisory
• secunia.com/advisories/59290 · Third Party Advisory
• secunia.com/advisories/59291 · Third Party Advisory
• kb.cert.org/vuls/id/489228 · Third Party Advisory
• securityfocus.com/bid/67124 · Third Party Advisory

smack のその他の脆弱性

• CVE-2016-10027中 5.9Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle …
• CVE-2014-0363中 5.8The ServerTrustManager component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify basicConstraints and nameConstraints…