Lucene search
FreeBSDBDFA6C04-027A-11EF-9C21-901B0E9408DCHistoryApr 23, 2024 - 12:00 a.m.
py-matrix-synapse -- weakness in auth chain indexing allows DoS
2024-04-2300:00:00
vuxml.freebsd.org
5
matrix synapse security
denial of service
remote attack
disk fill
high cpu usage
unix
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
7.3 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
10.4%
Matrix developers report:
Weakness in auth chain indexing allows DoS from remote
room members through disk fill and high CPU usage. (High severity)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | py38-matrix-synapse | < 1.105.1 | UNKNOWN |
| FreeBSD | any | noarch | py39-matrix-synapse | < 1.105.1 | UNKNOWN |
| FreeBSD | any | noarch | py310-matrix-synapse | < 1.105.1 | UNKNOWN |
| FreeBSD | any | noarch | py311-matrix-synapse | < 1.105.1 | UNKNOWN |
Related
osv
osv
CVE-2024-31208
2024-04-23 18:15:14
PYSEC-2024-50
2024-04-23 18:15:00
Synapse V2 state resolution weakness allows Denial of Service (DoS)
2024-04-23 21:15:46
alpinelinux
alpinelinux
CVE-2024-31208
2024-04-23 18:15:14
ubuntucve
ubuntucve
CVE-2024-31208
2024-04-23 00:00:00
debiancve
debiancve
CVE-2024-31208
2024-04-23 18:15:14
fedora
fedora
[SECURITY] Fedora 38 Update: rust-pythonize-0.21.1-1.fc38
2024-05-03 01:37:49
[SECURITY] Fedora 40 Update: rust-pythonize-0.21.1-1.fc40
2024-05-03 01:44:45
[SECURITY] Fedora 39 Update: matrix-synapse-1.105.1-1.fc39
2024-05-03 01:33:24
github
github
Synapse V2 state resolution weakness allows Denial of Service (DoS)
2024-04-23 21:15:46
cve
cve
CVE-2024-31208
2024-04-23 18:15:14
nessus
nessus
Fedora 39 : matrix-synapse / rust-pythonize (2024-d408b654d6)
2024-05-02 00:00:00
Fedora 40 : matrix-synapse / rust-pythonize (2024-3ff83cb806)
2024-05-02 00:00:00
Fedora 38 : matrix-synapse / rust-pythonize (2024-7be0693731)
2024-05-02 00:00:00
openvas
openvas
Fedora: Security Advisory for matrix-synapse (FEDORA-2024-7be0693731)
2024-05-27 00:00:00
Fedora: Security Advisory for rust-pythonize (FEDORA-2024-7be0693731)
2024-05-27 00:00:00
Fedora: Security Advisory for rust-pythonize (FEDORA-2024-3ff83cb806)
2024-05-27 00:00:00
veracode
veracode
Denial Of Service (DoS)
2024-04-24 06:39:00
cvelist
cvelist
nvd
nvd
CVE-2024-31208
2024-04-23 18:15:14
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
7.3 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
10.4%
Related for BDFA6C04-027A-11EF-9C21-901B0E9408DC