CVE-2021-34813

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room key backup from the homeserver) because olm_pk_decrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build configurations.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
VendorProductVersion
matrixolm
𝑥
< 3.2.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
olm
bullseye
no-dsa
buster
no-dsa
bookworm
3.2.13~dfsg-1
fixed
sid
3.2.16+dfsg-2
fixed
trixie
3.2.16+dfsg-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
olm
noble
not-affected
mantic
not-affected
lunar
not-affected
kinetic
not-affected
jammy
not-affected
impish
ignored
hirsute
ignored
groovy
ignored
focal
Fixed 3.1.3+dfsg-2ubuntu0.1~esm1
released
bionic
not-affected
xenial
dne
trusty
dne
Common Weakness Enumeration
References
https://gitlab.matrix.org/matrix-org/olm/-/commit/ccc0d122ee1b4d5e5ca4ec1432086be17d5f901b
https://gitlab.matrix.org/matrix-org/olm/-/releases/3.2.3
https://matrix.org/blog/2021/06/14/adventures-in-fuzzing-libolm
https://gitlab.matrix.org/matrix-org/olm/-/commit/ccc0d122ee1b4d5e5ca4ec1432086be17d5f901b
https://gitlab.matrix.org/matrix-org/olm/-/releases/3.2.3
https://matrix.org/blog/2021/06/14/adventures-in-fuzzing-libolm