p PatchFirst

CVE-2024-45193

CVE-2024-45193

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does not ensure that S < n). This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVSS 4.3 · Medium · EPSS 0.3%

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • olm Debian:12

    Versions
    • 3.2.13~dfsg-1
    • 3.2.15~dfsg-1
    • 3.2.16+dfsg-1
    • 3.2.16+dfsg-2
    • 3.2.16+dfsg-3
    • 3.2.16+dfsg-4
    • 3.2.16+dfsg-5
    • 3.2.16+dfsg-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Debian:13

    Versions
    • 3.2.16+dfsg-3
    • 3.2.16+dfsg-4
    • 3.2.16+dfsg-5
    • 3.2.16+dfsg-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Debian:14

    Versions
    • 3.2.16+dfsg-3
    • 3.2.16+dfsg-4
    • 3.2.16+dfsg-5
    • 3.2.16+dfsg-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:18.04:LTS

    Versions
    • 2.2.2+git20170526.0fd768e+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:Pro:20.04:LTS

    Versions
    • 3.1.3+dfsg-2
    • 3.1.3+dfsg-2build1
    • 3.1.3+dfsg-2build2
    • 3.1.3+dfsg-2ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:22.04:LTS

    Versions
    • 3.2.1~dfsg-7ubuntu2
    • 3.2.1~dfsg-7ubuntu3
    • 3.2.10~dfsg-4ubuntu1
    • 3.2.10~dfsg-5ubuntu1
    • 3.2.10~dfsg-6ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:24.04:LTS

    Versions
    • 3.2.13~dfsg-1ubuntu1
    • 3.2.15~dfsg-1ubuntu1
    • 3.2.16+dfsg-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:25.10

    Versions
    • 3.2.16+dfsg-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:26.10

    Versions
    • 3.2.16+dfsg-5
    • 3.2.16+dfsg-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:26.04:LTS

    Versions
    • 3.2.16+dfsg-3
    • 3.2.16+dfsg-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →