PT-2023-23730 · Synapse+1 · Synapse+1

Moderatedkasak · Publicado 2023-05-24 · Atualizado 2023-09-18 · CVE-2023-32323

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Média

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L

Name of the Vulnerable Software and Affected Versions Synapse versions up to and including 1.73

Description A malicious user on a Synapse homeserver with permission to create certain state events can disable outbound federation from one homeserver to another. This is possible due to the lack of size limitation on the invite room state field in Synapse versions up to and including 1.73, allowing for the creation of an arbitrarily large invite event. Synapse instances with federation disabled are not affected.

Recommendations For Synapse versions up to and including 1.73, upgrade to Synapse 1.74 or newer urgently. As a partial mitigation, Synapse operators can disable open registration to limit the ability of attackers to create new accounts on the homeserver. If the homeserver has been attacked, restarting it will resume outgoing federation by entering "catchup mode", but this does not prevent the attacker from repeating their attack.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2023-4748

CVE-2023-32323

GHSA-F3WC-3VXV-XMVR

PYSEC-2023-67

Produtos afetados

Alt Linux

Synapse

Referências · 17

• 🔥 https://github.com/matrix-org/synapse/issues/14492 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/32xxx/CVE-2023-32323.json · Exploit
• https://github.com/matrix-org/synapse/pull/14642 · Correção
• https://github.com/matrix-org/synapse/security/advisories/GHSA-f3wc-3vxv-xmvr · Aviso do Fabricante
• https://github.com/matrix-org/synapse · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/matrix-synapse/PYSEC-2023-67.yaml · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-32323 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2023-32323 · Aviso do Fabricante
• https://osv.dev/vulnerability/PYSEC-2023-67 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-32323 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-32323 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-32323 · Nota de Segurança
• https://ubuntu.com/security/CVE-2023-32323 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-32323 · Aviso do Fabricante
• https://t.me/cvenotify/51632 · Publicação no Telegram