An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does not ensure that S < n). This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NMatrix Olm
APPMatrix≤ 3.2.16
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Powiązane podatności
CVE-2021-44538CRITICAL9.8PL ✓ten sam produkt
Buffer overflow w Matrix libolm — funkcja olm_session_describe
CVE-2021-34813CRITICAL9.8PL ✓ten sam produkt
Stack-based buffer overflow w Matrix libolm — RCE przez złośliwy homeserver
CVE-2024-45191MEDIUM5.3ten sam produkt
An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing ...
CVE-2024-45192MEDIUM5.3ten sam produkt
An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 w...
CVE-2023-38686CRITICAL9.3PL ✓ten sam vendor
Brak weryfikacji certyfikatu SMTP TLS w Matrix Sydent — podatność MITM