Vulnerability Bulletins |
CVE-2018-10657 |
|
| Affected software | MATRIX SYNAPSE |
| Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to federation/federation_base.py and handlers/message.py, as exploited in the wild in April 2018. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2018-10657 | |