Denial of Service Vulnerability in Synapse Matrix Homeserver
CVE-2024-52805

Currently unrated

Key Information:

Vendor

Element

Status
Vendor
CVE Published:
3 December 2024

What is CVE-2024-52805?

The Synapse Matrix homeserver, prior to version 1.120.1, has a flaw in handling multipart/form-data requests. Under certain configurations, this vulnerability can lead to an unexpected surge in memory usage, which can be exploited to execute denial of service attacks. The issue is rectified in version 1.120.1, which now rejects unsupported multipart/form-data content types, thus mitigating the risk of such attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

References

Timeline

  • Vulnerability published

.