SB2024010704 - Gentoo update for Synapse

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2024010704

SB2024010704 - Gentoo update for Synapse

Published: January 7, 2024

Security Bulletin ID SB2024010704
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Information disclosure

Breakdown by Severity

Medium 25% Low 75%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 vulnerabilities.


1) Cleartext storage of sensitive information (CVE-ID: CVE-2023-41335)

CWE-ID: CWE-312 - Cleartext Storage of Sensitive Information

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a user to gain access to sensitive information.

The vulnerability exists due to the way the application handles password change. When users update their passwords, the new credentials may be briefly held in the server database in clear text. A user with access to the database can obtain the password in clear text.


2) Improper access control (CVE-ID: CVE-2023-42453)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote user can forge read receipts for any event and mark the events as read for other application users.


3) Improper access control (CVE-ID: CVE-2023-43796)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to improper access control in cached remote user device information handling when querying device information. A remote attacker can query cached device information of remote users to disclose sensitive information.

This can be used to enumerate remote users known to the homeserver.


4) Input validation error (CVE-ID: CVE-2023-45129)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to cause a denial of service.

The vulnerability exists due to improper input validation in server ACL event handling when processing malicious server ACL events. A remote privileged user can send a malicious server ACL event to cause a denial of service.

Homeservers running on a closed federation are not affected.


Remediation

Install update from vendor's website.

References