matrix-rust-sdk is an implementation of a Matrix client-server library in Rust, and matrix-sdk-crypto is the Matrix encryption library. Prior to version 0.6, when a user requests a room key from their devices, the software correctly remembers the request. When the user receives a forwarded room key, the software accepts it without checking who the room key came from. This allows homeservers to try to insert room keys of questionable validity, potentially mounting an impersonation attack. Version 0.6 fixes this issue.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:NMatrix Rust Sdk
APPMatrix< 0.6
Powiązane podatności
matrix-sdk-base to biblioteka bazowa do tworzenia klienta Matrix. Wersje 0.14.1 i wcześniejsze nie potrafią ob...
Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5.6, if configured to ...
The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm se...
Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to r...
Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join...