Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86321
HistoryNov 24, 2022 - 12:00 a.m.

Matrix synapse resource management error vulnerability

2022-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

synapse is an open source application developed by Matrix. A resource management error vulnerability exists in versions of Matrix synapse prior to 1.53.0. The vulnerability stems from Synapse generating URL previews of media streams without limiting the connection time, which could be exploited to make Synapse connect to a streaming server (e.g. Icecast) for long periods of time in some cases.

CPENameOperatorVersion
matrix synapselt1.53.0

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L