CVE-2021-44538

Katalog CVE

CVSS 9.8 · Critical EPSS 2,0%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada matrix element, matrix javascript sdk +4 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted sequence of messages to manipulate the state of the receiver's session in such a way that, for some buffer sizes, a buffer overflow happens on a call to olm_session_describe. Furthermore, safe buffer sizes were undocumented. The overflow content is partially controllable by the attacker and limited to ASCII spaces and digits. The known affected products are Element Web And SchildiChat Web.

Rincian

Terbit di NVD

14 Desember 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

2,0% peluang dieksploitasi; lebih tinggi dari 80,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://matrix.org/blog/2021/12/13/disclosure-buffer-overflow-in-libolm-and-matrix-js-sdk patch · advisory vendor
• https://gitlab.matrix.org/matrix-org/olm/-/tags product · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5034 advisory pihak ketiga