Lucene search
K

3661 matches found

Fedora
Fedora
added 2022/01/06 1:12 a.m.14 views

[SECURITY] Fedora 35 Update: quaternion-0.0.95.1-1.fc35

Quaternion is a cross-platform desktop IM client for the Matrix protocol...

2.2AI score
Exploits0
Fedora
Fedora
added 2022/01/06 12:51 a.m.13 views

[SECURITY] Fedora 34 Update: quaternion-0.0.95.1-1.fc34

Quaternion is a cross-platform desktop IM client for the Matrix protocol...

2.2AI score
Exploits0
ALT Linux
ALT Linux
added 2021/12/27 12:0 a.m.21 views

Security fix for the ALT Linux 10 package thunderbird version 91.4.1-alt1

91.4.1-alt1 built Dec. 27, 2021 Andrey Cherepanov in task 292439 Dec. 21, 2021 Andrey Cherepanov - New version. - Security fixes: + CVE-2021-4126 OpenPGP signature status doesn't consider additional message content + CVE-2021-44538 Matrix chat library libolm bundled with Thunderbird vulnerable to...

7.5CVSS8.1AI score0.01921EPSS
Exploits0
Mageia
Mageia
added 2021/12/23 9:1 p.m.36 views

Updated thunderbird packages fix security vulnerability

OpenPGP signature status doesn't consider additional message content. CVE-2021-4126 Matrix chat library libolm bundled with Thunderbird vulnerable to a buffer overflow. CVE-2021-44538...

9.8CVSS3.2AI score0.01921EPSS
Exploits0References3
Mozilla
Mozilla
added 2021/12/21 12:0 a.m.288 views

Security Vulnerabilities fixed in Thunderbird 91.4.1 — Mozilla

When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered the inner signed message for the signature validity. This gave the false impression that the addition...

9.8CVSS3.3AI score0.01921EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2021/12/21 12:0 a.m.30 views

Unspecified Vulnerability in NumPy (CNVD-2021-101680)

NumPy is a Python scientific computing package. The product supports a large number of dimensional arrays and matrix calculations, as well as providing a large library of mathematical functions for data operations. A security vulnerability exists in NumPy 1.9 that stems from incomplete string...

5.3CVSS5.4AI score0.01561EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2021/12/20 12:0 a.m.28 views

Mozilla Thunderbird < 91.4.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 91.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-55 advisory. - Thunderbird users who use the Matrix chat protocol were vulnerable to a buffer overflow in libolm, that...

9.8CVSS7.9AI score0.01921EPSS
Exploits0References3
Mageia
Mageia
added 2021/12/19 4:13 p.m.30 views

Updated olm packages fix security vulnerability

Updated olm packages fix security vulnerability: The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of t...

9.8CVSS1.6AI score0.01921EPSS
Exploits0References2
NVD
NVD
added 2021/12/14 2:15 p.m.16 views

CVE-2021-44538

The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...

9.8CVSS0.01921EPSS
Exploits0References4
OSV
OSV
added 2021/12/14 2:15 p.m.17 views

CVE-2021-44538

The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...

9.8CVSS7.7AI score
Exploits0References4
OSV
OSV
added 2021/12/14 2:15 p.m.2 views

DEBIAN-CVE-2021-44538

The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...

9.8CVSS9.1AI score0.01921EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2021/12/14 2:15 p.m.20 views

CVE-2021-44538

The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...

9.8CVSS7.7AI score0.01921EPSS
Exploits0References5
OSV
OSV
added 2021/12/14 2:15 p.m.1 views

UBUNTU-CVE-2021-44538

The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...

9.8CVSS7.9AI score0.01921EPSS
Exploits0References6
Prion
Prion
added 2021/12/14 2:15 p.m.19 views

Buffer overflow

The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...

7.5CVSS9.4AI score0.01921EPSS
Exploits0References4Affected Software6
CVE
CVE
added 2021/12/14 1:26 p.m.141 views

CVE-2021-44538

CVE-2021-44538: The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object state is partially controllable by the remote party; crafted messages can manipulate the receiver’s session so that, for some buffer sizes, a buffer overflow ...

9.8CVSS9.4AI score0.01921EPSS
Exploits0References4Affected Software3
Debian CVE
Debian CVE
added 2021/12/14 1:26 p.m.26 views

CVE-2021-44538

The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...

9.8CVSS9.7AI score0.01921EPSS
Exploits0
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.4 views

Matrix libolm 缓冲区错误漏洞

Matrix libolm is a cryptographic library. A security vulnerability in the olmsessiondescribe function in Matrix libolm before 3.2.7 allows an attacker to construct a carefully crafted sequence of messages to manipulate the state of the recipient's session, and for certain buffer sizes, a buffer...

9.8CVSS8.5AI score0.01921EPSS
Exploits0References13
VMware
VMware
added 2021/12/10 12:0 a.m.262 views

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities (CVE-2021-44228, CVE-2021-45046)

1. Impacted Products Under Evaluation VMware Horizon VMware vCenter Server VMware HCX VMware NSX-T Data Center VMware Unified Access Gateway VMware WorkspaceOne Access VMware Identity Manager VMware vRealize Operations VMware vRealize Operations Cloud Proxy VMware vRealize Automation VMware...

9.3CVSS0.3AI score0.99999EPSS
Exploits351References4Affected Software50
Fedora
Fedora
added 2021/12/09 1:35 a.m.36 views

[SECURITY] Fedora 34 Update: matrix-synapse-1.48.0-1.fc34

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

7.4AI score0.01514EPSS
Exploits0
Fedora
Fedora
added 2021/12/09 1:12 a.m.27 views

[SECURITY] Fedora 35 Update: matrix-synapse-1.48.0-1.fc35

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

7.4AI score0.01514EPSS
Exploits0
Rows per page
Query Builder