CVE-2020-26257

Published: Dic 09, 2020 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2020-0106 Aliases: GHSA-hxmp-pqch-c8mm, PYSEC-2020-236
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,5
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high
MEDIUM 4,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: single
Confidentiality: none
Integrity: none
Availability: partial

Description

AI Translation Available

Matrix is an ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference 'homeserver' implementation of Matrix. A malicious or poorly-implemented homeserver can inject malformed events into a room by specifying a different room id in the path of a `/send_join`, `/send_leave`, `/invite` or `/exchange_third_party_invite` request. This can lead to a denial of service in which future events will not be correctly sent to other servers over federation. This affects any server which accepts federation requests from untrusted servers. The Matrix Synapse reference implementation before version 1.23.1 the implementation is vulnerable to this injection attack. Issue is fixed in version 1.23.1. As a workaround homeserver administrators could limit access to the federation API to trusted servers (for example via `federation_domain_whitelist`).

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0045
Percentile
0,6th
Updated

EPSS Score Trend (Last 90 Days)

79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Stable
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control Confidentiality Integrity Availability
Potential Impacts:
Bypass Protection Mechanism Read Application Data Execute Unauthorized Code Or Commands
Applicable Platforms
Technologies: AI/ML, Web Based, Web Server
Likelihood of Exploit: High
View CWE Details
400

Uncontrolled Resource Consumption

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Access Control Other
Potential Impacts:
Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Resource Consumption (Other) Bypass Protection Mechanism Other
Applicable Platforms
All platforms may be affected
Likelihood of Exploit: High
View CWE Details
Operating System

Fedora by Fedoraproject

Product Information
Vendor Fedoraproject
Product Fedora
Version 32
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Fedora by Fedoraproject

Product Information
Vendor Fedoraproject
Product Fedora
Version 33
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Synapse by Matrix

Product Information
Vendor Matrix
Product Synapse
Version Range Affected
To 1.23.1 (exclusive)
cpe:2.3:a:matrix:synapse:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://github.com/matrix-org/synapse/blob/develop/CHANGES.…
Release Notes Third Party Advisory
https://github.com/matrix-org/synapse/blob/develop/CHANGES.md#synapse-1231-2020…
https://github.com/matrix-org/synapse/commit/3ce2f303f15f6a…
Patch Third Party Advisory
https://github.com/matrix-org/synapse/commit/3ce2f303f15f6ac3dc352298972dc6e04d…
https://github.com/matrix-org/synapse/pull/8776
Patch Third Party Advisory
https://github.com/matrix-org/synapse/pull/8776
https://github.com/matrix-org/synapse/security/advisories/G…
Third Party Advisory
https://github.com/matrix-org/synapse/security/advisories/GHSA-hxmp-pqch-c8mm
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://github.com/matrix-org/synapse/blob/develop/CHANGES.…
Release Notes Third Party Advisory
https://github.com/matrix-org/synapse/blob/develop/CHANGES.md#synapse-1231-2020…
https://github.com/matrix-org/synapse/commit/3ce2f303f15f6a…
Patch Third Party Advisory
https://github.com/matrix-org/synapse/commit/3ce2f303f15f6ac3dc352298972dc6e04d…
https://github.com/matrix-org/synapse/pull/8776
Patch Third Party Advisory
https://github.com/matrix-org/synapse/pull/8776
https://github.com/matrix-org/synapse/security/advisories/G…
Third Party Advisory
https://github.com/matrix-org/synapse/security/advisories/GHSA-hxmp-pqch-c8mm
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…
https://lists.fedoraproject.org/archives/list/package-annou…
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr…