CVE:CVE-2021-44538
CNNVD:CNNVD-202112-1241
Matrix libolm是一个加密库。
Matrix libolm 3.2.7 之前的 olm_session_describe 函数存在安全漏洞，攻击者可以构建一个精心设计的消息序列来操纵接收方会话的状态，对于某些缓冲区大小，在调用 olm_session_describe 时会发生缓冲区溢出。
solution:Upgrade matrix element to a higher version than 1.9.7,and avoid the version (,1.9.7); Upgrade matrix javascript_sdk to a higher version than 15.2.1,and avoid the version [2.4.2,15.2.1); Upgrade matrix olm to a higher version than 3.2.8,and avoid the version [3.1.4,3.2.8); Upgrade schildi schildichat to a higher version than 1.9.7-sc1,and avoid the version (,1.9.7-sc1); Upgrade cinny_project cinny to a higher version than 1.6.0,and avoid the version (,1.6.0); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0