p PatchFirst

CVE-2021-44538

CVE-2021-44538

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted sequence of messages to manipulate the state of the receiver's session in such a way that, for some buffer sizes, a buffer overflow happens on a call to olm_session_describe. Furthermore, safe buffer sizes were undocumented. The overflow content is partially controllable by the attacker and limited to ASCII spaces and digits. The known affected products are Element Web And SchildiChat Web.

CVSS 9.8 · Critical · EPSS 2.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • olm Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.2.8~dfsg-1

    Update to 3.2.8~dfsg-1

  • olm Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.2.8~dfsg-1

    Update to 3.2.8~dfsg-1

  • olm Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.2.8~dfsg-1

    Update to 3.2.8~dfsg-1

  • thunderbird Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:91.4.1-1

    Update to 1:91.4.1-1

  • thunderbird Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:91.4.1-1

    Update to 1:91.4.1-1

  • thunderbird Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:91.4.1-1

    Update to 1:91.4.1-1

  • thunderbird Ubuntu:18.04:LTS

    Versions
    • 1:52.4.0+build1-0ubuntu2
    • 1:52.6.0+build1-0ubuntu1
    • 1:52.7.0+build1-0ubuntu1
    • 1:52.8.0+build1-0ubuntu0.18.04.1
    • 1:52.9.1+build3-0ubuntu0.18.04.1
    • 1:60.2.1+build1-0ubuntu0.18.04.2
    • 1:60.4.0+build2-0ubuntu0.18.04.1
    • 1:60.5.1+build2-0ubuntu0.18.04.1
    • 1:60.6.1+build2-0ubuntu0.18.04.1
    • 1:60.7.0+build1-0ubuntu0.18.04.1
    • 1:60.7.1+build1-0ubuntu0.18.04.1
    • 1:60.7.2+build2-0ubuntu0.18.04.1
    • 1:60.8.0+build1-0ubuntu0.18.04.1
    • 1:60.9.0+build1-0ubuntu0.18.04.1
    • 1:68.2.1+build1-0ubuntu0.18.04.1
    • 1:68.2.2+build1-0ubuntu0.18.04.1
    • 1:68.4.1+build1-0ubuntu0.18.04.1
    • 1:68.7.0+build1-0ubuntu0.18.04.1
    • 1:68.8.0+build2-0ubuntu0.18.04.2
    • 1:68.10.0+build1-0ubuntu0.18.04.1
    • 1:78.8.1+build1-0ubuntu0.18.04.1
    • 1:78.11.0+build1-0ubuntu0.18.04.2
    • 1:78.13.0+build1-0ubuntu0.18.04.1
    • 1:78.14.0+build1-0ubuntu0.18.04.1
    • 1:78.14.0+build1-0ubuntu0.18.04.2
    Affected ranges
    • ECOSYSTEM: < 1:91.5.0+build1-0ubuntu0.18.04.1

    Update to 1:91.5.0+build1-0ubuntu0.18.04.1

  • olm Ubuntu:18.04:LTS

    Versions
    • 2.2.2+git20170526.0fd768e+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • thunderbird Ubuntu:20.04:LTS

    Versions
    • 1:68.1.2+build1-0ubuntu1
    • 1:68.1.2+build1-0ubuntu2
    • 1:68.2.1+build1-0ubuntu1
    • 1:68.2.2+build1-0ubuntu1
    • 1:68.3.0+build2-0ubuntu1
    • 1:68.3.1+build1-0ubuntu2
    • 1:68.4.1+build1-0ubuntu1
    • 1:68.4.2+build2-0ubuntu1
    • 1:68.5.0+build1-0ubuntu1
    • 1:68.6.0+build2-0ubuntu1
    • 1:68.7.0+build1-0ubuntu1
    • 1:68.7.0+build1-0ubuntu2
    • 1:68.8.0+build2-0ubuntu0.20.04.2
    • 1:68.10.0+build1-0ubuntu0.20.04.1
    • 1:78.7.1+build1-0ubuntu0.20.04.1
    • 1:78.8.1+build1-0ubuntu0.20.04.1
    • 1:78.11.0+build1-0ubuntu0.20.04.2
    • 1:78.13.0+build1-0ubuntu0.20.04.2
    • 1:78.14.0+build1-0ubuntu0.20.04.1
    • 1:78.14.0+build1-0ubuntu0.20.04.2
    Affected ranges
    • ECOSYSTEM: < 1:91.5.0+build1-0ubuntu0.20.04.1

    Update to 1:91.5.0+build1-0ubuntu0.20.04.1

  • node-matrix-js-sdk Ubuntu:20.04:LTS

    Versions
    • 0.9.2-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:Pro:20.04:LTS

    Versions
    • 3.1.3+dfsg-2
    • 3.1.3+dfsg-2build1
    • 3.1.3+dfsg-2build2
    • 3.1.3+dfsg-2ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • node-matrix-js-sdk Ubuntu:22.04:LTS

    Versions
    • 9.3.0+~cs9.9.16-2
    • 9.11.0+~cs9.9.16-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:22.04:LTS

    Versions
    • 3.2.1~dfsg-7ubuntu2
    • 3.2.1~dfsg-7ubuntu3
    • 3.2.10~dfsg-4ubuntu1
    • 3.2.10~dfsg-5ubuntu1
    • 3.2.10~dfsg-6ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • thunderbird Ubuntu:22.04:LTS

    Versions
    • 1:91.1.2+build1-0ubuntu1
    • 1:91.3.0+build2-0ubuntu1
    • 1:91.3.1+build1-0ubuntu1
    • 1:91.3.2+build1-0ubuntu1
    • 1:91.4.0+build1.1-0ubuntu1
    • 1:91.4.0+build2-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 1:91.5.0+build1-0ubuntu1

    Update to 1:91.5.0+build1-0ubuntu1

  • node-matrix-js-sdk Ubuntu:24.04:LTS

    Versions
    • 9.11.0+~cs9.9.16-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:24.04:LTS

    Versions
    • 3.2.13~dfsg-1ubuntu1
    • 3.2.15~dfsg-1ubuntu1
    • 3.2.16+dfsg-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:25.10

    Versions
    • 3.2.16+dfsg-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:26.10

    Versions
    • 3.2.16+dfsg-5
    • 3.2.16+dfsg-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:26.04:LTS

    Versions
    • 3.2.16+dfsg-3
    • 3.2.16+dfsg-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →