CVE-2023-29529

CVSS V2 None CVSS V3 None
Description
matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. An attacker present in a room where an MSC3401 group call is taking place can eavesdrop on the video and audio of participants using matrix-js-sdk, without their knowledge. To affected matrix-js-sdk users, the attacker will not appear to be participating in the call. This attack is possible because matrix-js-sdk's group call implementation accepts incoming direct calls from other users, even if they have not yet declared intent to participate in the group call, as a means of resolving a race condition in call setup. Affected versions do not restrict access to the user's outbound media in this case. Legacy 1:1 calls are unaffected. This is fixed in matrix-js-sdk 24.1.0. As a workaround, users may hold group calls in private rooms where only the exact users who are expected to participate in the call are present.
Overview
  • CVE ID
  • CVE-2023-29529
  • Assigner
  • security-advisories@github.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-04-14T19:15:09
  • Last Modified Date
  • 2023-04-25T14:06:24
Weakness Enumerations
CWE URL
NVD-CWE-noinfo http://cwe.mitre.org/data/definitions/NVD-noinfo.html
CWE-862 http://cwe.mitre.org/data/definitions/862.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:matrix:javascript_sdk:*:*:*:*:*:node.js:*:* 1 OR 24.1.0
References
Reference URL Reference Tags
https://github.com/matrix-org/matrix-js-sdk/releases/tag/v24.1.0
https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-6g67-q39g-r79q
https://github.com/matrix-org/matrix-spec-proposals/pull/3401
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-29529
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29529
History
Created Old Value New Value Data Type Notes
2023-04-17 04:45:07 Added to TrackCVE
2023-04-17 04:45:11 Weakness Enumeration new
2023-04-20 14:01:01 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-04-25 15:00:50 2023-04-25T14:06:24 CVE Modified Date updated
2023-04-25 15:00:50 Undergoing Analysis Analyzed Vulnerability Status updated
2023-04-25 15:00:52 Weakness Enumeration update
2023-04-25 15:00:54 CPE Information updated