Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-269w-9hm6-g22q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room key backup from the homeserver) because olm_pk_decrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build configurations.

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room key backup from the homeserver) because olm_pk_decrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build configurations.

EPSS

Процентиль: 89%
0.04458
Низкий

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 4 лет назад

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room key backup from the homeserver) because olm_pk_decrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build configurations.

CVSS3: 9.8
nvd
больше 4 лет назад

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room key backup from the homeserver) because olm_pk_decrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build configurations.

CVSS3: 9.8
debian
больше 4 лет назад

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to cra ...

CVSS3: 9.8
fstec
больше 4 лет назад

Уязвимость реализации криптографической трещотки Double Ratchet Libolm, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

EPSS

Процентиль: 89%
0.04458
Низкий

Дефекты

CWE-787