EUVD-2021-0119

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Sydent lacks limits on request and response sizes, risking memory exhaustion and denial of service.

Reporter	Title	Published	Views	Family All 13
CNNVD	Matrix Sydent 资源管理错误漏洞	15 Apr 202100:00	–	cnnvd
CVE	CVE-2021-29430	15 Apr 202120:35	–	cve
Cvelist	CVE-2021-29430 Denial of service attack via memory exhaustion	15 Apr 202120:35	–	cvelist
Debian CVE	CVE-2021-29430	15 Apr 202120:35	–	debiancve
Github Security Blog	Sydent vulnerable to denial of service attack via memory exhaustion	19 Apr 202114:54	–	github
NVD	CVE-2021-29430	15 Apr 202121:15	–	nvd
OSV	GHSA-WMG4-8CP2-HPG9 Sydent vulnerable to denial of service attack via memory exhaustion	19 Apr 202114:54	–	osv
OSV	PYSEC-2021-21	15 Apr 202121:15	–	osv
Prion	Design/Logic Flaw	15 Apr 202121:15	–	prion
Positive Technologies	PT-2021-18206 · Sydent · Sydent	15 Apr 202100:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "9a1e9aa6-eb26-3eb0-886c-100bb79f6210",
        "vendor": {
          "name": "matrix-org"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "8a73b1de-2e52-348a-aaf6-0351767c36e1",
        "product": {
          "name": "sydent"
        },
        "product_version": "< 2.3.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/matrix-org/sydent/commit/0523511d2fb40f2738f8a8549868f44b96e5dab7
github	www.github.com/matrix-org/sydent/commit/89071a1a754c69a50deac89e6bb74002d4cda19d
github	www.github.com/matrix-org/sydent/commit/f56eee315b6c44fdd9f6aa785cc2ec744a594428
github	www.github.com/matrix-org/sydent/security/advisories/GHSA-wmg4-8cp2-hpg9
pypi	www.pypi.org/project/matrix-sydent/
github	www.github.com/matrix-org/sydent/releases/tag/v2.3.0
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-29430
github	www.github.com/pypa/advisory-database/tree/main/vulns/matrix-sydent/PYSEC-2021-21.yaml
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

CVSS 25

EPSS0.01367