Denial Of Service (DoS)

🗓️ 02 Jun 2023 13:21:16Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 12 Views

Vulnerability in matrix-synapse software allows malicious homeserver to exploit room state checks, causing Denial Of Service (DoS)

Reporter	Title	Published	Views	Family All 41
AlpineLinux	CVE-2022-39374	26 May 202313:44	–	alpinelinux
Circl	CVE-2022-39374	15 Jan 202515:55	–	circl
CNNVD	Matrix 资源管理错误漏洞	26 May 202300:00	–	cnnvd
CVE	CVE-2022-39374	26 May 202313:44	–	cve
Cvelist	CVE-2022-39374 Synapse Denial of service due to incorrect application of event authorization rules during state resolution	26 May 202313:44	–	cvelist
Debian CVE	CVE-2022-39374	26 May 202313:44	–	debiancve
EUVD	EUVD-2023-0138	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 37 Update: python-matrix-common-1.3.0-7.fc37	18 Sep 202301:37	–	fedora
Fedora	[SECURITY] Fedora 37 Update: rust-pythonize-0.19.0-1.fc37	18 Sep 202301:37	–	fedora
Fedora	[SECURITY] Fedora 37 Update: matrix-synapse-1.80.0-5.fc37	18 Sep 202301:37	–	fedora

Vulners

Node

matrix-synapse matrix-synapseMatch1.23.0-1debian

AND

debian debian_linuxMatch999

matrix synapseMatch1.42.0-r0python

AND

matrix synapseMatch1.62.0-r0python

AND

matrix synapseMatch1.57.1-r0python

AND

matrix synapseMatch1.36.0-r0python

AND

matrix synapseMatch1.56.0-r0python

AND

matrix synapseMatch1.45.1-r0python

AND

matrix synapseMatch1.48.0-r0python

AND

matrix synapseMatch1.59.1-r0python

AND

matrix synapseMatch1.58.1-r0python

AND

matrix synapseMatch1.51.0-r0python

AND

matrix synapseMatch1.67.0-r0python

AND

matrix synapseMatch1.14.0-r0python

AND

matrix synapseMatch1.29.0-r0python

AND

matrix synapseMatch1.63.1-r0python

AND

matrix synapseMatch1.40.0-r0python

AND

matrix synapseMatch1.12.4-r0python

AND

matrix synapseMatch1.35.0-r0python

AND

matrix synapseMatch1.32.2-r0python

AND

matrix synapseMatch1.31.0-r0python

AND

matrix synapseMatch1.66.0-r0python

AND

matrix synapseMatch1.64.0-r0python

AND

matrix synapseMatch1.44.0-r0python

AND

matrix synapseMatch1.63.0-r0python

AND

matrix synapseMatch1.61.1-r0python

AND

matrix synapseMatch1.49.2-r0python

AND

matrix synapseMatch1.65.0-r0python

AND

matrix synapseMatch1.11.1-r0python

AND

matrix synapseMatch1.61.0-r0python

AND

matrix synapseMatch1.43.0-r0python

AND

matrix synapseMatch1.34.0-r0python

AND

matrix synapseMatch1.51.0-r1python

AND

matrix synapseMatch1.41.1-r0python

AND

matrix synapseMatch1.55.2-r0python

AND

matrix synapseMatch1.37.1-r0python

AND

matrix synapseMatch1.12.0-r0python

AND

matrix synapseMatch1.30.1-r0python

AND

matrix synapseMatch1.12.3-r0python

AND

matrix synapseMatch1.46.0-r0python

AND

matrix synapseMatch1.38.1-r0python

AND

matrix synapseMatch1.64.0-r1python

AND

matrix synapseMatch1.39.0-r0python

AND

matrix synapseMatch1.38.0-r0python

AND

alpinelinux alpine_linuxMatchedge

matrix-synapse matrix-synapseRange0.33.8rc1–1.67.0python

Source	Link
github	www.github.com/matrix-org/synapse/pull/13723
github	www.github.com/matrix-org/synapse/commit/b73cbb82157d9666e8d667733afebc0d09ed858c
github	www.github.com/matrix-org/synapse/security/advisories/GHSA-p9qp-c452-f9r7
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/UJIJRP5ZH6B3KGFLHCAKR2IX2Y4Z25QD/

13 Feb 2025 19:34Current

6.6Medium risk

Vulners AI Score6.6

CVSS 36.5

EPSS0.00169

SSVC