PT-2021-18206 · Sydent · Sydent

Richvdh · Published 2021-04-15 · Updated 2022-08-03 · CVE-2021-29430

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: Sydent versions prior to 89071a1, 0523511, f56eee3

Description: Sydent is a reference Matrix identity server that does not limit the size of requests it receives from HTTP clients, allowing a malicious user to send an HTTP request with a very large body, leading to memory exhaustion and denial of service. Additionally, Sydent does not limit response size for requests it makes to remote Matrix homeservers, which could lead to memory exhaustion and denial of service if a malicious homeserver returns a very large response. This issue affects any server that accepts registration requests from untrusted clients.

Recommendations: For versions prior to 89071a1, 0523511, f56eee3, update to one of these releases to resolve the issue. As a temporary workaround, consider limiting request sizes in an HTTP reverse-proxy to minimize the risk of exploitation. Note: There are no known workarounds for the problem with overlarge responses from remote Matrix homeservers.

Fix

Allocation of Resources Without Limits

RCE

Resource Exhaustion

Weakness Enumeration

CWE-770

CWE-20

CWE-400

Related Identifiers

CVE-2021-29430

GHSA-WMG4-8CP2-HPG9

PYSEC-2021-21

Affected Products

Sydent

References · 13

• https://github.com/matrix-org/sydent/security/advisories/GHSA-wmg4-8cp2-hpg9 · Patch
• https://github.com/matrix-org/sydent/commit/0523511d2fb40f2738f8a8549868f44b96e5dab7 · Patch
• https://github.com/matrix-org/sydent/commit/89071a1a754c69a50deac89e6bb74002d4cda19d · Patch
• https://github.com/matrix-org/sydent/commit/f56eee315b6c44fdd9f6aa785cc2ec744a594428 · Patch
• https://osv.dev/vulnerability/GHSA-wmg4-8cp2-hpg9 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29430 · Security Note
• https://osv.dev/vulnerability/CVE-2021-29430 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-21 · Vendor Advisory
• https://github.com/matrix-org/sydent/releases/tag/v2.3.0 · Note
• https://github.com/matrix-org/sydent · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/matrix-sydent/PYSEC-2021-21.yaml · Note
• https://pypi.org/project/matrix-sydent · Note
• https://t.me/cvenotify/34203 · Telegram Post