Denial of service attack due to invalid JSON

🗓️ 24 Nov 2020 22:58:58Reported by GitHub Advisory DatabaseType

A denial of service attack due to invalid JSON data impacts Matrix clients by crashing or hanging, with potential long-lasting effects on room state

Reporter	Title	Published	Views	Family All 35
AlpineLinux	CVE-2020-26890	24 Nov 202002:07	–	alpinelinux
ArchLinux	[ASA-202011-23] matrix-synapse: denial of service	26 Nov 202000:00	–	archlinux
Circl	CVE-2020-26890	24 Nov 202007:46	–	circl
CNNVD	Matrix Synapse Injection Vulnerability	23 Nov 202000:00	–	cnnvd
CVE	CVE-2020-26890	24 Nov 202002:07	–	cve
Cvelist	CVE-2020-26890	24 Nov 202002:07	–	cvelist
Debian CVE	CVE-2020-26890	24 Nov 202002:07	–	debiancve
EUVD	EUVD-2020-0107	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 32 Update: python-signedjson-1.1.1-3.fc32	10 Dec 202001:27	–	fedora
Fedora	[SECURITY] Fedora 33 Update: matrix-synapse-1.23.0-1.fc33	10 Dec 202001:16	–	fedora

Vulners

Node

matrix-synapseRange<1.20.0pip

Source	Link
github	www.github.com/matrix-org/synapse/security/advisories/GHSA-4mp3-385r-v63f
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-26890
github	www.github.com/pypa/advisory-database/tree/main/vulns/matrix-synapse/PYSEC-2020-237.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/G7YXMMYQP46PYL664JQUXCA3LPBJU7DQ
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/U34DPP4ZLOEDUY2ZCWOHQPU5GA5LYNUQ
pypi	www.pypi.org/project/matrix-synapse
github	www.github.com/advisories/GHSA-4mp3-385r-v63f

30 Sep 2024 20:31Current

2.2Low risk

Vulners AI Score2.2

CVSS 25

CVSS 3.17.5

EPSS0.02967