Known vulnerabilities in matrix-synapse (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:matrix-synapse_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting matrix-synapse (Ubuntu package) matrix-synapse (Ubuntu package) is affected by 15 known vulnerabilities: 2 high, 7 medium, 6 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127000 - Interpretation Conflict
CVE-2024-53863
CWE-436 Medium
No
No
0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 03.12.2024 SB20241203115
SB2024120477
SB2024120478
and 1 more
#VU127006 - Incorrect Calculation
CVE-2024-31208
CWE-682 Low
No
No
0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 23.04.2024 SB2024042361
SB2024042483
SB2024042484
and 2 more
#VU129610 - Improper Access Control
CVE-2023-43796
CWE-284 Medium
No
No
0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 31.10.2023 SB20231031124
SB2024010704
SB2023110195
and 2 more
#VU81455 - Improper Access Control
CVE-2023-42453
CWE-284 Low
No
No
0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 04.10.2023 SB2023100438
SB2023100444
SB2023100445
and 3 more
#VU81454 - Cleartext Storage of Sensitive Information
CVE-2023-41335
CWE-312 Low
No
No
0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 04.10.2023 SB2023100438
SB2023100444
SB2023100445
and 3 more
#VU79748 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39335
CWE-200 Low
No
No
0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 20.08.2023 SB20230820232
SB20230820233
SB2023090940
and 1 more
#VU77059 - Server-Side Request Forgery (SSRF)
CVE-2023-32683
CWE-918 Medium
No
No
0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 07.06.2023 SB2023060718
SB20230820209
SB20230820221
and 2 more
#VU129606 - Incorrect Authorization
CVE-2022-39374
CWE-863 Low
No
No
0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 24.05.2023 SB2023052449
SB2023090940
SB20250422198
#VU76260 - Improper Verification of Cryptographic Signature
CVE-2018-16515
CWE-347 High
No
No
Ubuntu Pro 17.05.2023 SB2018091858
SB2023051777
SB2018090645
and 1 more
#VU76259 - Key Management Errors
CVE-2019-5885
CWE-320 Medium
No
No
Ubuntu Pro 17.05.2023 SB2019032141
SB2023051777
SB2019012435
and 2 more
#VU76258 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2019-11842
CWE-338 Medium
No
No
Ubuntu Pro 17.05.2023 SB2019050925
SB2023051777
#VU22754 - Insufficient Verification of Data Authenticity
CVE-2019-18835
CWE-345 High
No
No
Ubuntu Pro 13.11.2019 SB2019111339
SB2023051777
#VU14207 - Permissions, Privileges, and Access Controls
CVE-2018-12291
CWE-264 Low
No
No
Ubuntu Pro 06.08.2018 SB2018080711
SB2018062021
SB2023051777
and 1 more
#VU37030 - Improper input validation
CVE-2018-12423
CWE-20 Medium
No
No
Ubuntu Pro 14.06.2018 SB2018061414
SB2023051777
#VU12518 - Improper input validation
CVE-2018-10657
CWE-20 Medium
No
Exploited
Ubuntu Pro 02.05.2018 SB2018050901
SB2023051777
SB2018050111