PT-2018-10035 · Matrix+2 · Matrix Synapse+2

Jzk · Publicado 2018-05-02 · Atualizado 2023-05-16 · CVE-2018-10657

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Matrix Synapse versions prior to 0.28.1

Description The issue is a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable. This is related to the files federation/federation base.py and handlers/message.py. The flaw has been exploited in the wild, with incidents reported in April 2018.

Recommendations For versions prior to 0.28.1, update to version 0.28.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the federation functionality to minimize the risk of exploitation. Avoid using the depth parameter with high values in the affected API endpoints until the issue is resolved.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2018-1887

CVE-2018-10657

GHSA-VMCC-4P4X-X7WG

USN-6076-1

Produtos afetados

Alt Linux

Matrix Synapse

Ubuntu

Referências · 20

• https://github.com/matrix-org/synapse/commit/33f469ba19586bbafa0cf2c7d7c35463bdab87eb · Correção
• https://github.com/matrix-org/synapse · Nota
• https://docs.google.com/document/d/1I3fi2S-XnpO45qrpCsowZv8P8dHcNZ4fsBsbOW7KABI/edit#heading=h.fj95ykuss7s1 · Nota
• https://ubuntu.com/security/notices/USN-6076-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2018-10657 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-12291 · Aviso do Fabricante
• https://matrix.org/blog/2018/05/01/security-update-synapse-0-28-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-6076-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-10657 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2018-10657 · Nota de Segurança
• https://ubuntu.com/security/CVE-2019-5885 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-10657 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-10657 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-10657 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-12423 · Aviso do Fabricante