Lucene search
+L

66 matches found

OpenVAS
OpenVAS
added 2021/12/20 12:0 a.m.5 views

Fedora: Security Advisory for libolm (FEDORA-2021-16b848fe79)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/12/20 12:0 a.m.39 views

Mozilla Thunderbird < 91.4.1

The version of Thunderbird installed on the remote Windows host is prior to 91.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-55 advisory. - Thunderbird users who use the Matrix chat protocol were vulnerable to a buffer overflow in libolm, that an attack...

9.8CVSS8AI score0.01921EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2021/12/20 12:0 a.m.5 views

Fedora: Security Advisory for libolm (FEDORA-2021-b514c8ea72)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Mageia
Mageia
added 2021/12/19 4:13 p.m.36 views

Updated olm packages fix security vulnerability

Updated olm packages fix security vulnerability: The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of t...

9.8CVSS1.6AI score0.01921EPSS
SaveExploits0References2
Fedora
Fedora
added 2021/12/16 1:18 a.m.17 views

[SECURITY] Fedora 35 Update: libolm-3.2.8-1.fc35

An implementation of the Double Ratchet cryptographic ratchet in C++...

1.3AI score
SaveExploits0
Fedora
Fedora
added 2021/12/16 1:14 a.m.14 views

[SECURITY] Fedora 34 Update: libolm-3.2.8-1.fc34

An implementation of the Double Ratchet cryptographic ratchet in C++...

1.3AI score
SaveExploits0
NVD
NVD
added 2021/12/14 2:15 p.m.19 views

CVE-2021-44538

The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...

9.8CVSS0.01921EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/12/14 2:15 p.m.4 views

CVE-2021-44538

The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...

9.8CVSS7.8AI score0.01921EPSS
SaveExploits0References5
OSV
OSV
added 2021/12/14 2:15 p.m.19 views

CVE-2021-44538

The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...

9.8CVSS7.7AI score
SaveExploits0References4
Prion
Prion
added 2021/12/14 2:15 p.m.21 views

Buffer overflow

The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...

7.5CVSS9.4AI score0.01921EPSS
SaveExploits0References4Affected Software6
UbuntuCve
UbuntuCve
added 2021/12/14 2:15 p.m.28 views

CVE-2021-44538

The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...

9.8CVSS7.7AI score0.01921EPSS
SaveExploits0References5
CVE
CVE
added 2021/12/14 1:26 p.m.148 views

CVE-2021-44538

CVE-2021-44538: The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object state is partially controllable by the remote party; crafted messages can manipulate the receiver’s session so that, for some buffer sizes, a buffer overflow ...

9.8CVSS9.4AI score0.01921EPSS
SaveExploits0References4Affected Software3
Debian CVE
Debian CVE
added 2021/12/14 1:26 p.m.71 views

CVE-2021-44538

The olmsessiondescribe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted...

9.8CVSS9.7AI score0.01921EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/12/13 12:0 a.m.16 views

FreeBSD : Matrix clients -- several vulnerabilities (0dcf68fa-5c31-11ec-875e-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0dcf68fa-5c31-11ec-875e-901b0e9408dc advisory. - Matrix developers report: Today we are releasing security updates to libolm, matrix-js-sdk, and sever...

6AI score
SaveExploits0References2
FreeBSD
FreeBSD
added 2021/12/03 12:0 a.m.16 views

Matrix clients -- several vulnerabilities

Matrix developers report: Today we are releasing security updates to libolm, matrix-js-sdk, and several clients including Element Web / Desktop. Users are encouraged to upgrade as soon as possible. These releases mitigate a buffer overflow in olmsessiondescribe, a libolm debugging function used b...

2.9AI score
SaveExploits0References1
CNVD
CNVD
added 2021/06/18 12:0 a.m.37 views

Matrix libolm Buffer Overflow Vulnerability

Matrix libolm is a cryptographic library. a security vulnerability exists in Matrix libolm, which can be exploited by attackers for remote code execution...

9.8CVSS6.5AI score0.04262EPSS
SaveExploits1References1
OSV
OSV
added 2021/06/16 6:15 p.m.3 views

DEBIAN-CVE-2021-34813

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client while it is attempting to retrieve an Olm encrypted room key backup from the homeserver because olmpkdecrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build...

9.8CVSS9.4AI score0.04262EPSS
SaveExploits1References1
NVD
NVD
added 2021/06/16 6:15 p.m.20 views

CVE-2021-34813

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client while it is attempting to retrieve an Olm encrypted room key backup from the homeserver because olmpkdecrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build...

9.8CVSS0.04262EPSS
SaveExploits1References3
OSV
OSV
added 2021/06/16 6:15 p.m.13 views

CVE-2021-34813

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client while it is attempting to retrieve an Olm encrypted room key backup from the homeserver because olmpkdecrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build...

9.8CVSS7.5AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/06/16 6:15 p.m.4 views

CVE-2021-34813

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client while it is attempting to retrieve an Olm encrypted room key backup from the homeserver because olmpkdecrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build...

9.8CVSS8AI score0.04262EPSS
SaveExploits1References4
Rows per page
Query Builder