Vulnerability · Published Apr 19, 2021 · Assigned by GitHub_M
CVE-2021-29453Denial of service through memory exhaustion
Medium 5.7
In plain English
A medium-severity uncontrolled resource consumption in matrix-media-repo from turt2live. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).
Official description
matrix-media-repo is an open-source multi-domain media repository for Matrix. Versions 1.2.6 and earlier of matrix-media-repo do not properly handle malicious images which are crafted to be small in file size, but large in complexity. A malicious user could upload a relatively small image in terms of file size, using particular image formats, which expands to have extremely large dimensions during the process of thumbnailing. The server can be exhausted of memory in the process of trying to load the whole image into memory for thumbnailing, leading to denial of service. Version 1.2.7 has a fix for the vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| turt2live | matrix-media-repo | <= 1.2.6 |
Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H