p PatchFirst

CVE-2024-42369

CVE-2024-42369 · A room with itself as a its predecessor will freeze matrix-js-sdk

This page contains facts from public vulnerability sources. Check the original advisory before updating.

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. A malicious homeserver can craft a room or room structure such that the predecessors form a cycle. The matrix-js-sdk's getRoomUpgradeHistory function will infinitely recurse in this case, causing the code to hang. This method is public but also called by the 'leaveRoomChain()' method, so leaving a room will also trigger the bug. This was patched in matrix-js-sdk 34.3.1.

CVSS 4.1 · Medium · EPSS 0.5% · Fix available

Published
Updated

Stack: system · node

Affected products and versions

  • matrix-js-sdk

    Versions
    • < 34.3.1: Affected

    No fix published

  • node-matrix-js-sdk Debian:11

    Versions
    • 9.11.0+~cs9.9.16-1
    • 9.11.0+~cs9.9.16-2
    • 9.3.0+~cs9.9.16-2
    • 9.7.0~~rc1+~cs9.9.16-1
    • 9.7.0~~rc1+~cs9.9.16-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • matrix-js-sdk npm

    Affected ranges
    • SEMVER: < 34.3.1

    Update to 34.3.1

  • node-matrix-js-sdk Ubuntu:20.04:LTS

    Versions
    • 0.9.2-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • node-matrix-js-sdk Ubuntu:22.04:LTS

    Versions
    • 9.3.0+~cs9.9.16-2
    • 9.11.0+~cs9.9.16-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • node-matrix-js-sdk Ubuntu:24.04:LTS

    Versions
    • 9.11.0+~cs9.9.16-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →