An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does not ensure that S < n). This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Vendors Products
Matrix
  • Olm

No data.

No data.

References
Link Providers
https://gitlab.matrix.org/matrix-org/olm/ cve-icon cve-icon
https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985 cve-icon cve-icon
https://news.ycombinator.com/item?id=41249371 cve-icon cve-icon
https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/ cve-icon cve-icon
History

Tue, 10 Sep 2024 19:30:00 +0000

Type Values Removed Values Added
First Time appeared Matrix
Matrix olm
Weaknesses CWE-327
CPEs cpe:2.3:a:matrix:olm:*:*:*:*:*:*:*:*
Vendors & Products Matrix
Matrix olm
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

 cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sun, 01 Sep 2024 19:30:00 +0000

Type Values Removed Values Added
Description An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does not ensure that S < n). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does not ensure that S < n). This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Wed, 28 Aug 2024 19:00:00 +0000

Type Values Removed Values Added
Description An issue was discovered in Matrix libolm (aka Olm) through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does not ensure that S < n). NOTE: This vulnerability only affects products that are no longer supported by the maintainer. An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does not ensure that S < n). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Thu, 22 Aug 2024 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 22 Aug 2024 15:30:00 +0000

Type Values Removed Values Added
Description An issue was discovered in Matrix libolm (aka Olm) through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does not ensure that S < n). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
References
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-08-22T00:00:00

Updated: 2024-09-10T18:34:25.640Z

Reserved: 2024-08-22T00:00:00

Link: CVE-2024-45193

cve-icon Vulnrichment

Updated: 2024-08-22T15:56:11.114Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-08-22T16:15:10.300

Modified: 2024-09-10T19:35:10.143

Link: CVE-2024-45193

cve-icon Redhat

No data.