USN-6076-1

Dashboard / Vulnerabilities / USN-6076-1

USN-6076-1

Summary: matrix-synapse vulnerabilities

Details: It was discovered that Synapse incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2019-18835, CVE-2018-12291, CVE-2018-10657) It was discovered that Synapse incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to hijack the session. (CVE-2019-11842, CVE-2018-12423) It was discovered that Synapse incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to perform spoofing or user impersonation. (CVE-2019-5885, CVE-2018-16515)

References: https://ubuntu.com/security/notices/USN-6076-1, https://ubuntu.com/security/CVE-2018-10657, https://ubuntu.com/security/CVE-2018-12291, https://ubuntu.com/security/CVE-2018-12423, https://ubuntu.com/security/CVE-2018-16515, https://ubuntu.com/security/CVE-2019-5885, https://ubuntu.com/security/CVE-2019-11842, https://ubuntu.com/security/CVE-2019-18835