PT-2018-10035 · Matrix+2 · Matrix Synapse+2

Jzk · Published 2018-05-02 · Updated 2023-05-16 · CVE-2018-10657

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Matrix Synapse versions prior to 0.28.1

Description The issue is a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable. This is related to the files federation/federation base.py and handlers/message.py. The flaw has been exploited in the wild, with incidents reported in April 2018.

Recommendations For versions prior to 0.28.1, update to version 0.28.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the federation functionality to minimize the risk of exploitation. Avoid using the depth parameter with high values in the affected API endpoints until the issue is resolved.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2018-1887

CVE-2018-10657

GHSA-VMCC-4P4X-X7WG

USN-6076-1

Affected Products

Alt Linux

Matrix Synapse

Ubuntu

References · 20

• https://github.com/matrix-org/synapse/commit/33f469ba19586bbafa0cf2c7d7c35463bdab87eb · Patch
• https://ubuntu.com/security/notices/USN-6076-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-10657 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12291 · Vendor Advisory
• https://matrix.org/blog/2018/05/01/security-update-synapse-0-28-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6076-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10657 · Security Note
• https://cve.org/CVERecord?id=CVE-2018-10657 · Security Note
• https://ubuntu.com/security/CVE-2019-5885 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10657 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-10657 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-10657 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12423 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16515 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-10657 · Vendor Advisory