Summary
Denis Kasak discovered that Olm was not verifying the length of input being
processed by the olm_pk_decrypt module, which introduced a stack-based buffer
overflow vulnerability to the library. An attacker could use this to
cause a denial of service (application crash) or possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | olm | 3.1.3+dfsg-2ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve a…
References
-
report
https://ubuntu.com/security/CVE-2021-34813