Denial Of Service (DoS)

🗓️ 12 Oct 2023 13:44:00Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 21 Views

matrix_synapse vulnerability to Denial Of Service (DoS) from malicious server ACL events impacting performanc

Reporter	Title	Published	Views	Family All 35
AlpineLinux	CVE-2023-45129	10 Oct 202317:17	–	alpinelinux
BDU FSTEC	The vulnerability of the Access Control List (ACL) management mechanism in the Synapse home server allows a perpetrator to trigger a service failure.	27 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-45129	10 Oct 202322:23	–	circl
CNNVD	Matrix Synapse Security Vulnerability	10 Oct 202300:00	–	cnnvd
CVE	CVE-2023-45129	10 Oct 202317:17	–	cve
Cvelist	CVE-2023-45129 matrix-synapse vulnerable to denial of service due to malicious server ACL events	10 Oct 202317:17	–	cvelist
Debian CVE	CVE-2023-45129	10 Oct 202317:17	–	debiancve
EUVD	EUVD-2023-0135	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 38 Update: matrix-synapse-1.94.0-2.fc38	20 Oct 202300:42	–	fedora
Fedora	[SECURITY] Fedora 39 Update: matrix-synapse-1.94.0-2.fc39	3 Nov 202318:56	–	fedora

Vulners

Node

matrix-synapse matrix-synapseMatch1.23.0-1debian

AND

debian debian_linuxMatch999

matrix synapseMatch1.30.1-r0python

AND

matrix synapseMatch1.73.0-r0python

AND

matrix synapseMatch1.36.0-r0python

AND

matrix synapseMatch1.77.0-r0python

AND

matrix synapseMatch1.57.1-r0python

AND

matrix synapseMatch1.81.0-r0python

AND

matrix synapseMatch1.62.0-r0python

AND

matrix synapseMatch1.63.1-r0python

AND

matrix synapseMatch1.86.0-r0python

AND

matrix synapseMatch1.70.1-r0python

AND

matrix synapseMatch1.61.0-r0python

AND

matrix synapseMatch1.11.1-r0python

AND

matrix synapseMatch1.44.0-r0python

AND

matrix synapseMatch1.83.0-r0python

AND

matrix synapseMatch1.76.0-r0python

AND

matrix synapseMatch1.34.0-r0python

AND

matrix synapseMatch1.63.0-r0python

AND

matrix synapseMatch1.65.0-r0python

AND

matrix synapseMatch1.67.0-r0python

AND

matrix synapseMatch1.72.0-r0python

AND

matrix synapseMatch1.86.0-r1python

AND

matrix synapseMatch1.82.0-r0python

AND

matrix synapseMatch1.32.2-r0python

AND

matrix synapseMatch1.35.0-r0python

AND

matrix synapseMatch1.51.0-r0python

AND

matrix synapseMatch1.48.0-r0python

AND

matrix synapseMatch1.58.1-r0python

AND

matrix synapseMatch1.51.0-r1python

AND

matrix synapseMatch1.64.0-r0python

AND

matrix synapseMatch1.55.2-r0python

AND

matrix synapseMatch1.89.0-r0python

AND

matrix synapseMatch1.91.2-r0python

AND

matrix synapseMatch1.84.1-r0python

AND

matrix synapseMatch1.92.3-r0python

AND

matrix synapseMatch1.37.1-r0python

AND

matrix synapseMatch1.85.2-r0python

AND

matrix synapseMatch1.43.0-r0python

AND

matrix synapseMatch1.12.4-r0python

AND

matrix synapseMatch1.41.1-r0python

AND

matrix synapseMatch1.12.3-r0python

AND

matrix synapseMatch1.14.0-r0python

AND

matrix synapseMatch1.64.0-r1python

AND

matrix synapseMatch1.38.1-r0python

AND

matrix synapseMatch1.29.0-r0python

AND

matrix synapseMatch1.12.0-r0python

AND

matrix synapseMatch1.39.0-r0python

AND

matrix synapseMatch1.75.0-r1python

AND

matrix synapseMatch1.42.0-r0python

AND

matrix synapseMatch1.61.1-r0python

AND

matrix synapseMatch1.40.0-r0python

AND

matrix synapseMatch1.46.0-r0python

AND

matrix synapseMatch1.38.0-r0python

AND

matrix synapseMatch1.78.0-r0python

AND

matrix synapseMatch1.79.0-r1python

AND

matrix synapseMatch1.71.0-r0python

AND

matrix synapseMatch1.45.1-r0python

AND

matrix synapseMatch1.90.0-r0python

AND

matrix synapseMatch1.87.0-r0python

AND

matrix synapseMatch1.80.0-r0python

AND

matrix synapseMatch1.56.0-r0python

AND

matrix synapseMatch1.88.0-r0python

AND

matrix synapseMatch1.49.2-r0python

AND

matrix synapseMatch1.59.1-r0python

AND

matrix synapseMatch1.74.0-r0python

AND

matrix synapseMatch1.31.0-r0python

AND

matrix synapseMatch1.93.0-r0python

AND

matrix synapseMatch1.66.0-r0python

AND

alpinelinux alpine_linuxMatchedge

matrix synapseMatch1.84.1-r0python

AND

matrix synapseMatch1.82.0-r0python

AND

matrix synapseMatch1.86.0-r0python

AND

matrix synapseMatch1.87.0-r0python

AND

matrix synapseMatch1.83.0-r0python

AND

matrix synapseMatch1.85.2-r0python

AND

matrix synapseMatch1.88.0-r0python

AND

matrix synapseMatch1.93.0-r0python

AND

alpinelinux alpine_linuxMatch3.18

matrix_synapse matrix_synapseRange0.33.5–1.93.0python

Source	Link
github	www.github.com/matrix-org/synapse/pull/16360
github	www.github.com/matrix-org/synapse/commit/f84da3c32ec74cf054e2fd6d10618aa4997cffaa
github	www.github.com/advisories/GHSA-5chr-wjw5-3gq4
github	www.github.com/matrix-org/synapse/security/advisories/GHSA-5chr-wjw5-3gq4
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/KEVRB4MG5UXQ5RLZHSUJXM5GWEBYYS5B/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/N6P4QULVUE254WI7XF2LWWOGHCYVFXFY/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WRO4MPQ6HOXIUZM6RJP6VTCTMV7RD2T3/
matrix-org	www.matrix-org.github.io/synapse/latest/admin_api/rooms.html
security	www.security.gentoo.org/glsa/202401-12

07 Jan 2024 13:24Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.14.9

EPSS0.01166