Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2021-29433

Denial of service (via resource exhaustion) due to improper input validation

Description

Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. A patch for the vulnerability is in version 2.3.0. No workarounds are known to exist.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

matrix-org sydent

  • <= 2.2.0affected

References