CVE-2015-2058: JABBERD2

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID.

Affected products

• JABBERD2 JABBERD2: up to and including 2.3.2

Published 2015-08-12. Last modified 2026-06-17.