CVE-2021-34813

概要

参考情報

• gitlab.matrix.org/matrix-org/olm/-/commit/ccc0d122ee1b4d5e5ca4ec1432086be17d5f901b · Patch
• gitlab.matrix.org/matrix-org/olm/-/releases/3.2.3 · Release Notes
• matrix.org/blog/2021/06/14/adventures-in-fuzzing-libolm · Exploit

olm のその他の脆弱性

• CVE-2024-45193中 4.3An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does no…
• CVE-2024-45192中 5.3An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session key…
• CVE-2024-45191中 5.3An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes.…
• CVE-2021-44538緊急 9.8The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryp…