p PatchFirst

CVE-2018-16515

CVE-2018-16515

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature validation.

CVSS 8.8 · High · EPSS 1.5% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • matrix-synapse PyPI

    Affected ranges
    • ECOSYSTEM: ≥ 0.33.3, < 0.33.3.1

    Update to 0.33.3.1

  • matrix-synapse PyPI

    Affected ranges
    • ECOSYSTEM: < 0.33.2.1

    Update to 0.33.2.1

  • matrix-synapse PyPI

    Affected ranges
    • ECOSYSTEM: < 0.33.2.1 ∪ ≥ 0.33.3, < 0.33.3.1

    Update to 0.33.2.1; Update to 0.33.3.1

  • matrix-synapse Ubuntu:Pro:18.04:LTS

    Versions
    • 0.19.2+dfsg-6
    • 0.24.0+dfsg-1
    Affected ranges
    • ECOSYSTEM: < 0.24.0+dfsg-1ubuntu0.1~esm1

    Update to 0.24.0+dfsg-1ubuntu0.1~esm1

Original sources

Check your server →