CVE-2022-41952

🗓️ 22 Nov 2022 16:10:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 60 Views

Synapse before 1.52.0 allows long-lived connections towards streaming media servers, leading to excessive traffic and connections. Upgrade to 1.53.0 for a timeout mechanism and content type allow list

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 11
Veracode	Denial Of Service (DoS)	24 Nov 202211:31	–	veracode
NVD	CVE-2022-41952	22 Nov 202216:15	–	nvd
CNVD	Matrix synapse resource management error vulnerability	24 Nov 202200:00	–	cnvd
Debian CVE	CVE-2022-41952	22 Nov 202216:15	–	debiancve
OSV	Uncontrolled Resource Consumption in Matrix Synapse	1 Apr 202218:16	–	osv
OSV	CVE-2022-41952	22 Nov 202216:15	–	osv
Prion	Design/Logic Flaw	22 Nov 202216:15	–	prion
Vulnrichment	CVE-2022-41952 Uncontrolled Resource Consumption in Matrix Synapse	22 Nov 202200:00	–	vulnrichment
Github Security Blog	Uncontrolled Resource Consumption in Matrix Synapse	1 Apr 202218:16	–	github
UbuntuCve	CVE-2022-41952	22 Nov 202200:00	–	ubuntucve

Nvd

Vulners

Node

matrix synapseRange<1.53.0

[
  {
    "vendor": "matrix-org",
    "product": "synapse",
    "versions": [
      {
        "version": "< 1.53.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/matrix-org/synapse/releases/tag/v1.53.0
github	www.github.com/matrix-org/synapse/security/advisories/GHSA-4822-jvwx-w47h
github	www.github.com/matrix-org/synapse/pull/11936
github	www.github.com/matrix-org/synapse/releases/tag/v1.52.0
github	www.github.com/matrix-org/synapse/pull/11784

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Nov 2022 16:15Current

5.4Medium risk

Vulners AI Score5.4

CVSS35.3 - 6.5

EPSS0.0006

SSVC