ejabberd is prone to a vulnerability that may allow attackers to cause an affected application to enter an infinite loop, resulting in a denial-of- service condition. ejabberd versions prior to 2.1.9 are affected.

Updates are available. Please see the references for more information.

• http://www.ejabberd.im/
• http://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_2.1.9/
• http://www.securityfocus.com/bid/50737
• https://support.process-one.net/browse/EJAB-1498

---

Updated on 2015-03-25