CVE-2014-2829: Erlang Solutions MongooseIM through 1.3.1 rev.

Security readout for executives and security teams

This CVE affects older MongooseIM XMPP servers that mishandle highly compressed XML content. A remote attacker could send a crafted XMPP stream that expands into excessive processing or memory use, potentially degrading or stopping chat service availability. Exposure is most likely where legacy MongooseIM deployments accept remote XMPP client or server streams and support compressed XML stream processing. Organizations not running MongooseIM, or running versions newer than the vulnerable line, are unlikely to be affected based on the bundle. Treat as a targeted availability risk for legacy chat infrastructure. Prioritize if MongooseIM supports customer, staff, or operational messaging, especially when internet-facing. Lower priority if no MongooseIM assets exist or affected versions are retired. Mitigation focus: Identify any MongooseIM deployments and their exact versions.; Prioritize upgrade or backport review for versions through 1.3.1 rev. 2.; Review the referenced vendor commit and current MongooseIM guidance before applying fixes..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.