Описание
Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to federation/federation_base.py and handlers/message.py, as exploited in the wild in April 2018.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | ignored | end of standard support, was needed |
| cosmic | released | 0.28.1+dfsg-1 |
| devel | released | 0.28.1+dfsg-1 |
| disco | released | 0.28.1+dfsg-1 |
| eoan | released | 0.28.1+dfsg-1 |
| esm-apps/bionic | released | 0.24.0+dfsg-1ubuntu0.1~esm1 |
| esm-apps/focal | released | 0.28.1+dfsg-1 |
| esm-apps/jammy | released | 0.28.1+dfsg-1 |
| esm-infra-legacy/trusty | DNE |
Показывать по
Ссылки на источники
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to federation/federation_base.py and handlers/message.py, as exploited in the wild in April 2018.
Matrix Synapse before 0.28.1 is prone to a denial of service flaw wher ...
ALT-PU-2018-1887: package `matrix-synapse` update to version 0.29.1-alt1
EPSS
5 Medium
CVSS2
7.5 High
CVSS3