FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

py-matrix-synapse -- weakness in auth chain indexing allows DoS

Affected packages
		py310-matrix-synapse	<	1.105.1
		py311-matrix-synapse	<	1.105.1
		py38-matrix-synapse	<	1.105.1
		py39-matrix-synapse	<	1.105.1

Details

VuXML ID	bdfa6c04-027a-11ef-9c21-901b0e9408dc
Discovery	2024-04-23
Entry	2024-04-24

Matrix developers report:

Weakness in auth chain indexing allows DoS from remote room members through disk fill and high CPU usage. (High severity)

[source]

References

CVE Name	CVE-2024-31208
URL	https://element.io/blog/security-release-synapse-1-105-1/
URL	https://github.com/element-hq/synapse/security/advisories/GHSA-3h7q-rfh9-xm4v

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.