Sydent DoS (via resource exhaustion) due to improper input validation

概要

参考情報

• matrix-org/sydent security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2021-29433 · ADVISORY
• matrix-org/sydent commit 3175fd3 · WEB
• matrix-org/sydent · PACKAGE
• pypa/advisory-database · WEB
• pypi.org/project/matrix-sydent · WEB
• pypi.org/project/matrix-sydent · PACKAGE

matrix-sydent のその他の脆弱性

• CVE-2023-38686中 5.3Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5.6, if configured to send emails using TLS, Sydent …
• CVE-2021-29432中 5.7Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address…
• CVE-2021-29431中 6.5Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter …
• CVE-2021-29430高 7.5Sydent is a reference Matrix identity server. Sydent does not limit the size of requests it receives from HTTP clients. A malicious user cou…
• CVE-2019-11842高 7.5An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it ea…