Known vulnerabilities in matrix-synapse (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
matrix-synapse (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:matrix-synapse_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
15
Public exploits:
0
Known exploited (KEV):
1
Breakdown by Severity Chart
1.53.0-1ubuntu0.1~esm2
1.11.0-1ubuntu0.1~esm2
0.24.0+dfsg-1ubuntu0.1~esm4
1.121.0-5
1.103.0-1
1.103.0-2
1.103.0-3
1.103.0-4
1.103.0-5
1.116.0-1
1.116.0-2
1.116.0-3
1.116.0-4
1.121.0-1
1.121.0-2
1.121.0-3
1.121.0-4
1.100.0-1
1.99.0-3
1.99.0-2
1.99.0-1
1.97.0-1
1.95.1-1
1.95.0-1
1.91.2-1
1.91.2-2
1.92.0-1
1.92.0-2
1.92.0-3
1.93.0-1
1.94.0-1
1.90.0-1
1.78.0-1
1.77.0-1
1.74.0-1
1.73.0-1
1.72.0-1
1.71.0-1
1.71.0-2
1.65.0-1
1.66.0-1
1.66.0-2
1.68.0-1
1.69.0-1
1.70.1-1
1.64.0-3
1.64.0-1
1.64.0-2
1.63.0-1
1.61.1-1
1.61.0-3
1.61.0-2
1.61.0-1
1.59.1-1
1.59.1-2
1.55.0-1
1.55.0-2
1.56.0-1
1.57.1-1
1.52.0-1
1.51.0-1
1.50.2-1
1.50.0-1
1.50.1-1
1.49.2-1
1.49.0-1
1.48.0-1
1.47.1-1
1.47.0-1
1.47.0-2
1.46.0-1
1.45.1-1
1.45.0-1
1.40.0-1
1.41.1-1
1.42.0-1
1.43.0-1
1.44.0-1
1.44.0-2
1.39.0-1
1.38.1-1
1.38.0-1
1.37.1-1
1.37.0-1
1.36.0-1
1.35.1-1
1.35.0-1
1.34.0-1
1.33.2-1
1.28.0-1
1.29.0-1
1.30.0-1
1.31.0-1
1.31.0-2
1.27.0-1
1.26.0-3
1.26.0-2
1.26.0-1
1.25.0-2
1.25.0-1
1.24.0-2
1.24.0-1
1.23.0-1
1.22.1-2
1.22.1-1
1.19.2-1
1.19.3-1
1.20.0-1
1.20.1-1
1.21.1-1
1.21.2-1
1.19.1-1
1.19.0-1
1.18.0-1
1.17.0-1
1.16.0-1
1.15.2-1
1.15.1-1
1.15.0-1
1.13.0-1
1.11.1-1
1.12.0-1
1.12.3-1
1.10.0-2
1.10.0-1
1.9.1-1
1.9.0-1
1.8.0-1
1.7.3-1
1.7.2-1
1.7.1-1
1.7.0-1
1.7.0-2
1.6.1-1
1.6.0-1
1.5.1-1
1.5.0-1
1.4.0-1
1.2.1-2
1.2.1-1
1.1.0-1
0.99.3.2-1
0.99.5.1-1
0.99.5.2-1
1.0.0-1
1.0.0-2
0.99.2-6
0.99.2-5
0.99.2-4
0.99.2-2
0.99.2-3
1.100.0-1ubuntu1
1.53.0-1
Ubuntu Pro
1.12.4
1.12.4-1
1.11.0
1.11.0-1
1.3.0
0.24.0+dfsg
1.3.0-1
0.99.2-1
0.99.1.1-1
0.99.0-1
0.34.1.1-4
0.34.1.1-3
0.34.1.1-2
0.34.1.1-1
0.34.0-3
0.34.0-2
0.34.0-1
0.34.0~rc2-1
0.33.9-2
0.33.3-2
0.33.3.1-1
0.33.4-1
0.33.8-1
0.33.3-1
0.33.2+dfsg-3
0.33.2+dfsg-2
0.33.2+dfsg-1
0.33.1+dfsg-1
0.33.0+dfsg-1
0.32.2+dfsg-1
0.31.2+dfsg-1
0.31.1+dfsg-2
0.31.1+dfsg-1
0.31.0+dfsg-2
0.31.0+dfsg-1
0.30.0+dfsg-1
0.29.1+dfsg-1
0.27.2+dfsg-1
0.28.0+dfsg-1
0.28.0+dfsg-2
0.28.1+dfsg-1
0.24.0+dfsg-1
0.19.2+dfsg-6
0.19.2+dfsg-1
0.19.2+dfsg-2
0.19.2+dfsg-3
0.19.2+dfsg-4
0.19.2+dfsg-5
0.19.1-1
0.19.2-1
Vulnerabilities (15)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU127000 - Interpretation Conflict CVE-2024-53863 |
CWE-436 | Medium | 0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 | 03.12.2024 |
SB20241203115 SB2024120477 SB2024120478 and 1 more |
||
| #VU127006 - Incorrect Calculation CVE-2024-31208 |
CWE-682 | Low | 0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 | 23.04.2024 |
SB2024042361 SB2024042483 SB2024042484 and 2 more |
||
| #VU129610 - Improper Access Control CVE-2023-43796 |
CWE-284 | Medium | 0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 | 31.10.2023 |
SB20231031124 SB2024010704 SB2023110195 and 2 more |
||
| #VU81455 - Improper Access Control CVE-2023-42453 |
CWE-284 | Low | 0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 | 04.10.2023 |
SB2023100438 SB2023100444 SB2023100445 and 3 more |
||
| #VU81454 - Cleartext Storage of Sensitive Information CVE-2023-41335 |
CWE-312 | Low | 0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 | 04.10.2023 |
SB2023100438 SB2023100444 SB2023100445 and 3 more |
||
| #VU79748 - Exposure of sensitive information to an unauthorized actor CVE-2022-39335 |
CWE-200 | Low | 0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 | 20.08.2023 |
SB20230820232 SB20230820233 SB2023090940 and 1 more |
||
| #VU77059 - Server-Side Request Forgery (SSRF) CVE-2023-32683 |
CWE-918 | Medium | 0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 | 07.06.2023 |
SB2023060718 SB20230820209 SB20230820221 and 2 more |
||
| #VU129606 - Incorrect Authorization CVE-2022-39374 |
CWE-863 | Low | 0.24.0+dfsg-1ubuntu0.1~esm4, 1.11.0-1ubuntu0.1~esm2, 1.53.0-1ubuntu0.1~esm2 | 24.05.2023 |
SB2023052449 SB2023090940 SB20250422198 |
||
| #VU76260 - Improper Verification of Cryptographic Signature CVE-2018-16515 |
CWE-347 | High | Ubuntu Pro | 17.05.2023 |
SB2018091858 SB2023051777 SB2018090645 and 1 more |
||
| #VU76259 - Key Management Errors CVE-2019-5885 |
CWE-320 | Medium | Ubuntu Pro | 17.05.2023 |
SB2019032141 SB2023051777 SB2019012435 and 2 more |
||
| #VU76258 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2019-11842 |
CWE-338 | Medium | Ubuntu Pro | 17.05.2023 |
SB2019050925 SB2023051777 |
||
| #VU22754 - Insufficient Verification of Data Authenticity CVE-2019-18835 |
CWE-345 | High | Ubuntu Pro | 13.11.2019 |
SB2019111339 SB2023051777 |
||
| #VU14207 - Permissions, Privileges, and Access Controls CVE-2018-12291 |
CWE-264 | Low | Ubuntu Pro | 06.08.2018 |
SB2018080711 SB2018062021 SB2023051777 and 1 more |
||
| #VU37030 - Improper input validation CVE-2018-12423 |
CWE-20 | Medium | Ubuntu Pro | 14.06.2018 |
SB2018061414 SB2023051777 |
||
| #VU12518 - Improper input validation CVE-2018-10657 |
CWE-20 | Medium | Ubuntu Pro | 02.05.2018 |
SB2018050901 SB2023051777 SB2018050111 |