Lucene search

K
fedoraFedoraFEDORA:BB2EE307F420
HistoryAug 02, 2021 - 1:05 a.m.

[SECURITY] Fedora 34 Update: matrix-synapse-1.38.1-1.fc34

2021-08-0201:05:20
lists.fedoraproject.org
39
fedora
matrix
synapse
instant messaging
voip
python
twisted
homeserver
ecosystem
unix

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

AI Score

5.9

Confidence

Low

EPSS

0.003

Percentile

68.8%

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference “homeserver” implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in the context of a coded base and let you run your own homeserver and generally help bootstrap the ecosystem.

OSVersionArchitecturePackageVersionFilename
Fedora34anymatrix-synapse< 1.38.1UNKNOWN

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

AI Score

5.9

Confidence

Low

EPSS

0.003

Percentile

68.8%