An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keys. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NMatrix Olm
APPMatrix≤ 3.2.16
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Powiązane podatności
CVE-2021-44538CRITICAL9.8PL ✓ten sam produkt
Buffer overflow w Matrix libolm — funkcja olm_session_describe
CVE-2021-34813CRITICAL9.8PL ✓ten sam produkt
Stack-based buffer overflow w Matrix libolm — RCE przez złośliwy homeserver
CVE-2024-45191MEDIUM5.3ten sam produkt
An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing ...
CVE-2024-45193MEDIUM4.3ten sam produkt
An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack o...
CVE-2023-38686CRITICAL9.3PL ✓ten sam vendor
Brak weryfikacji certyfikatu SMTP TLS w Matrix Sydent — podatność MITM