Lucene search
+L

1185 matches found

Fedora
Fedora
added 2023/10/24 1:13 a.m.36 views

[SECURITY] Fedora 37 Update: matrix-synapse-1.80.0-7.fc37

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

4.9CVSS5AI score0.01166EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/10/24 12:0 a.m.30 views

Fedora 37 : matrix-synapse (2023-954c2ec5bd)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-954c2ec5bd advisory. Backport fix for CVE-2023-45129 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

4.9CVSS5.3AI score0.01166EPSS
SaveExploits0References2
Fedora
Fedora
added 2023/10/20 12:42 a.m.49 views

[SECURITY] Fedora 38 Update: matrix-synapse-1.94.0-2.fc38

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

4.9CVSS5AI score0.01166EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/10/20 12:0 a.m.20 views

Fedora 38 : matrix-synapse (2023-c3c8cc5f8b)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c3c8cc5f8b advisory. Update to v1.94.0 CVE-2023-45129 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

4.9CVSS5.3AI score0.01166EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/10/20 12:0 a.m.17 views

Fedora: Security Advisory for matrix-synapse (FEDORA-2023-c3c8cc5f8b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.9CVSS5.2AI score0.01166EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/10/12 2:35 p.m.4 views

SUSE CVE-2023-45129

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...

4.9CVSS6.9AI score0.01166EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2023/10/10 9:42 p.m.37 views

CVE-2023-45129

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...

4.9CVSS6.8AI score0.01166EPSS
SaveExploits0References6
OSV
OSV
added 2023/10/10 9:27 p.m.32 views

GHSA-5CHR-WJW5-3GQ4 matrix-synapse vulnerable to denial of service due to malicious server ACL events

Impact A malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which presumably do not need to use server ACLs are not affected. Patches Server administrators are advised to upgrade to...

6.9CVSS4.9AI score0.01166EPSS
SaveExploits0References11
Github Security Blog
Github Security Blog
added 2023/10/10 9:27 p.m.44 views

matrix-synapse vulnerable to denial of service due to malicious server ACL events

Impact A malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which presumably do not need to use server ACLs are not affected. Patches Server administrators are advised to upgrade to...

4.9CVSS5.4AI score0.01166EPSS
SaveExploits0References11Affected Software1
NVD
NVD
added 2023/10/10 6:15 p.m.25 views

CVE-2023-45129

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...

4.9CVSS5AI score0.01166EPSS
SaveExploits0References7
OSV
OSV
added 2023/10/10 6:15 p.m.3 views

DEBIAN-CVE-2023-45129

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...

4.9CVSS6.8AI score0.01166EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/10 6:15 p.m.21 views

Design/Logic Flaw

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...

3.3CVSS4.8AI score0.01166EPSS
SaveExploits0References7Affected Software2
UbuntuCve
UbuntuCve
added 2023/10/10 6:15 p.m.30 views

CVE-2023-45129

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...

4.9CVSS5.9AI score0.01166EPSS
SaveExploits0References4
PyPA
PyPA
added 2023/10/10 6:15 p.m.9 views

PYSEC-2023-199

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...

4.9CVSS6.8AI score0.01166EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/10/10 6:15 p.m.11 views

UBUNTU-CVE-2023-45129

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...

4.9CVSS5.8AI score0.01166EPSS
SaveExploits0References5
OSV
OSV
added 2023/10/10 6:15 p.m.19 views

PYSEC-2023-199

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...

4.9CVSS7.1AI score0.01166EPSS
SaveExploits0References3
OSV
OSV
added 2023/10/10 5:17 p.m.28 views

CVE-2023-45129 matrix-synapse vulnerable to denial of service due to malicious server ACL events

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...

4.9CVSS4.8AI score
SaveExploits0References9
CVE
CVE
added 2023/10/10 5:17 p.m.72 views

CVE-2023-45129

CVE-2023-45129 affects Synapse (Matrix homeserver). Before version 1.94.0, a malicious server ACL event can cause a (persistent) denial of service, impacting performance and reliability. Closed federation deployments are not affected. Mitigation: upgrade to Synapse 1.94.0 or later. As a workaroun...

4.9CVSS4.9AI score0.01166EPSS
SaveExploits0References7Affected Software1
AlpineLinux
AlpineLinux
added 2023/10/10 5:17 p.m.121 views

CVE-2023-45129

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...

4.9CVSS5AI score0.01166EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2023/10/10 5:17 p.m.78 views

CVE-2023-45129

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impact performance temporarily or permanently leading to a persistent denial of service. Homeservers running on a closed federation which...

4.9CVSS5AI score0.01166EPSS
SaveExploits0
Rows per page
Query Builder