Логотип exploitDog
bind:CVE-2023-45129
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-45129

Количество 6

Количество 6

ubuntu логотип

CVE-2023-45129

больше 2 лет назад

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected. Server administrators are advised to upgrade to Synapse 1.94.0 or later. As a workaround, rooms with malicious server ACL events can be purged and blocked using the admin API.

CVSS3: 4.9
EPSS: Низкий
redhat логотип

CVE-2023-45129

больше 2 лет назад

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected. Server administrators are advised to upgrade to Synapse 1.94.0 or later. As a workaround, rooms with malicious server ACL events can be purged and blocked using the admin API.

CVSS3: 4.9
EPSS: Низкий
nvd логотип

CVE-2023-45129

больше 2 лет назад

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected. Server administrators are advised to upgrade to Synapse 1.94.0 or later. As a workaround, rooms with malicious server ACL events can be purged and blocked using the admin API.

CVSS3: 4.9
EPSS: Низкий
debian логотип

CVE-2023-45129

больше 2 лет назад

Synapse is an open-source Matrix homeserver written and maintained by ...

CVSS3: 4.9
EPSS: Низкий
github логотип

GHSA-5chr-wjw5-3gq4

больше 2 лет назад

matrix-synapse vulnerable to denial of service due to malicious server ACL events

CVSS3: 4.9
EPSS: Низкий
fstec логотип

BDU:2023-07183

больше 2 лет назад

Уязвимость механизма управления доступа Access Control List (ACL) домашнего сервера Synapse, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 4.9
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-45129

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected. Server administrators are advised to upgrade to Synapse 1.94.0 or later. As a workaround, rooms with malicious server ACL events can be purged and blocked using the admin API.

CVSS3: 4.9
0%
Низкий
больше 2 лет назад
redhat логотип
CVE-2023-45129

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected. Server administrators are advised to upgrade to Synapse 1.94.0 or later. As a workaround, rooms with malicious server ACL events can be purged and blocked using the admin API.

CVSS3: 4.9
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-45129

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation (which presumably do not need to use server ACLs) are not affected. Server administrators are advised to upgrade to Synapse 1.94.0 or later. As a workaround, rooms with malicious server ACL events can be purged and blocked using the admin API.

CVSS3: 4.9
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-45129

Synapse is an open-source Matrix homeserver written and maintained by ...

CVSS3: 4.9
0%
Низкий
больше 2 лет назад
github логотип
GHSA-5chr-wjw5-3gq4

matrix-synapse vulnerable to denial of service due to malicious server ACL events

CVSS3: 4.9
0%
Низкий
больше 2 лет назад
fstec логотип
BDU:2023-07183

Уязвимость механизма управления доступа Access Control List (ACL) домашнего сервера Synapse, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 4.9
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу