Threat database

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.3%	CVE-2024-45193olm · n/a Medium4.3EPSS 0.3%2024-08-22CVE Database V5CVE-2024-45193 An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does not ensure that S < n). This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. EPSS 0.3%Vulnerability	CVE Database V5	2024-08-22
Medium	5.3	EPSS 0.5%	CVE-2024-45192olm · n/a Medium5.3EPSS 0.5%2024-08-22CVE Database V5CVE-2024-45192 An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keys. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. EPSS 0.5%Vulnerability	CVE Database V5	2024-08-22
Medium	5.3	EPSS 0.5%	CVE-2024-45191olm · n/a Medium5.3EPSS 0.5%2024-08-22CVE Database V5CVE-2024-45191 An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes. This is related to software that uses a lookup table for the SubWord step. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. EPSS 0.5%Vulnerability	CVE Database V5	2024-08-22

Page 1 of 1