PYSEC-2022-224

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

UBUNTU-CVE-2022-31052

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

CVE-2022-31052 URL previews can crash Synapse media repositories or Synapse monoliths

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

CVE-2022-31052

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

CVE-2022-31052

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

CVE-2022-31052 URL previews can crash Synapse media repositories or Synapse monoliths

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

CVE-2022-31052

CVE-2022-31052 affects Synapse (Matrix homeserver). In versions before 1.61.1, URL previews for some web pages can cause unbounded recursion, exhausting stack space and potentially crashing the Synapse process. Remote users can exploit via URL previews that clients auto-request, but the URL previ...

CVE-2022-31052 URL previews can crash Synapse media repositories or Synapse monoliths

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

Matrix Synapse 安全漏洞

Matrix Synapse is a Matrix Management Server implementation from the Matrix Foundation in the U.K. A denial of service vulnerability exists in versions of Matrix Synapse prior to 1.61.1, which stems from infinite recursion, where URL previews of certain web pages may exhaust the available stack...

CVE-2022-31052: Uncontrolled Recursion

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust the available stack space for the Synapse process due to unbounded recursion. This is sometimes recoverable and leads to an error for the reques...

PT-2022-20490

Name of the Vulnerable Software and Affected Versions Synapse versions prior to 1.61.1 Description The issue arises from unbounded recursion when generating URL previews of certain web pages, potentially exhausting the available stack space for the Synapse process. This can lead to errors or...

py-matrix-synapse -- unbounded recursion in urlpreview

Matrix developers report: This release fixes a vulnerability with Synapse's URL preview feature. URL previews of some web pages can lead to unbounded recursion, causing the request to either fail, or in some cases crash the running Synapse process. Note that: Homeservers with the urlpreviewenable...

MAL-2022-1384 Malicious code in azure-synapse-access-control (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95dada696a346729671364e7b943d286a369faca7422cf3cfaef0f1e956c0591 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-synapse-access-control (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95dada696a346729671364e7b943d286a369faca7422cf3cfaef0f1e956c0591 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arm-synapse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69185e741899f6aecff606a5a0a3d04bc90c3f64f4604441f69ae92c7f87e0bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1111 Malicious code in arm-synapse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69185e741899f6aecff606a5a0a3d04bc90c3f64f4604441f69ae92c7f87e0bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in synapse-artifacts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0e1e584725221a12679c41002914f98d62a8350234cecb0d4c19abe4d3b301d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in synapse-monitoring (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9522f22c758faa0d1404a496aca5bc00e6359a939c7d1dd41d5f7da218892773 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in synapse-managed-private-endpoints (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1c17bea232b736c62da3d64b16c7726920d31083e764ab22b60f313d0e757c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6384 Malicious code in synapse-artifacts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0e1e584725221a12679c41002914f98d62a8350234cecb0d4c19abe4d3b301d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...