Описание
Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, local authenticated users can cause Synapse to starve other requests of CPU and lead to other requests failing, causing other users to be denied service. This vulnerability is fixed in 1.152.1.
Ссылки
- MitigationVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.152.1 (исключая)
cpe:2.3:a:element:synapse:*:*:*:*:*:*:*:*
EPSS
Процентиль: 2%
0.00128
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-770
Связанные уязвимости
CVSS3: 5.5
ubuntu
5 месяцев назад
Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, local authenticated users can cause Synapse to starve other requests of CPU and lead to other requests failing, causing other users to be denied service. This vulnerability is fixed in 1.152.1.
CVSS3: 5.5
debian
5 месяцев назад
Synapse is an open source Matrix homeserver implementation. Prior to 1 ...
CVSS3: 5.5
altlinux
25 дней назад
ALT-PU-2026-18273: package `matrix-synapse` update to version 1.162.0-alt1
EPSS
Процентиль: 2%
0.00128
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-770