cbcvebase.
CVE-2018-10657
published 2018-05-02

CVE-2018-10657: Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to…

PriorityP272high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
ITWVulnCheck KEV
Exploited in the wild
EPSS
1.51%
71.6th percentile
Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to federation/federation_base.py and handlers/message.py, as exploited in the wild in April 2018.

Affected

2 ranges
VendorProductVersion rangeFixed in
debianmatrix-synapse< matrix-synapse 0.28.1+dfsg-1 (forky)matrix-synapse 0.28.1+dfsg-1 (forky)
matrixsynapse< 0.28.10.28.1

Detection & IOCsextracted from sources · hover to see the quote

pathfederation/federation_base.py
pathhandlers/message.py
urlhttps://github.com/matrix-org/synapse/commit/33f469ba19586bbafa0cf2c7d7c35463bdab87eb
  • Detect federation events where the 'depth' field is set to the maximum 64-bit signed integer value (9223372036854775807 / 2^63 - 1), which is the malicious payload used to render Matrix rooms unusable.
  • Monitor Matrix Synapse federation traffic for events with anomalously large depth values; exploitation was observed in the wild in April 2018.
  • ·Only Matrix Synapse versions before 0.28.1 are vulnerable; upgrade to 0.28.1 or later (Debian: 0.28.1+dfsg-1, Fedora: 0.28.1-1.fc28) to remediate.

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vulncheck7.5HIGH
vendor_debian7.5HIGH
vendor_ubuntu7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.