There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms,
    malicious homeservers can craft room events in such a way that prevents Synapse from providing full
    history to paginating clients. Clients could therefore fail to display room history. This vulnerability is
    fixed in 1.152.1. (CVE-2026-45076)

  - Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, local authenticated users
    can cause Synapse to starve other requests of CPU and lead to other requests failing, causing other users
    to be denied service. This vulnerability is fixed in 1.152.1. (CVE-2026-45078)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, local authenticated users
    can cause Synapse to starve other requests of CPU and lead to other requests failing, causing other users
    to be denied service. This vulnerability is fixed in 1.152.1. (CVE-2026-45078)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Synapse 是开源的 Matrix 主服务器实现。在版本之前 1.152.1，经身份验证的本地用户可导致 Synapse 耗尽其他 CPU 请求并导致其他请求失败，从而导致其他用户被拒绝服务。此漏洞已在 1.152.1 中修复。(CVE-2026-45078)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - Synapse 是開放原始碼 Matrix 主伺服器實作。之前， 1.152.1本機已驗證的使用者可能會導致 Synapse 耗盡 CPU 的其他要求，並導致其他要求失敗，進而導致其他使用者遭到拒絕服務。此弱點已在 1.152.1 中修正。(CVE-2026-45078)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Synapseは、オープンソースのMatrixホームサーバー実装です。1.152.1が出る前は、ローカルの認証されたユーザーがSynapseにCPUの他のリクエストを枯渇させ、他のリクエストを失敗させて、他のユーザーのサービスを拒否させる可能性があります。この脆弱性は 1.152.1 で修正されました。(CVE-2026-45078)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, local authenticated users     can cause Synapse to starve other requests of CPU and lead to other requests failing, causing other users     to be denied service. This vulnerability is fixed in 1.152.1. (CVE-2026-45078)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
442235	Alpine: multiple synapse packages: security update to 1.152.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2026/5/20	2026/11/6	medium
441865	SCA: security update for matrix-synapse (GHSA-8q93-326v-3m7g)	Tenable Cloud Security	SCA Checks	2026/5/14	2026/7/2	medium
442235	Alpine: multiple synapse packages: security update to 1.152.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2026/5/20	2026/11/6	medium
441865	SCA: security update for matrix-synapse (GHSA-8q93-326v-3m7g)	Tenable Self-Hosted Container Security	SCA Checks	2026/5/14	2026/7/2	medium
317950	Linux Distros 未修补的漏洞：CVE-2026-45078	Nessus	Misc.	2026/5/29	2026/9/29	medium
317950	Linux Distros 未修補弱點：CVE-2026-45078	Nessus	Misc.	2026/5/29	2026/9/29	medium
317950	Linux Distros のパッチ未適用の脆弱性: CVE-2026-45078	Nessus	Misc.	2026/5/29	2026/9/29	medium
317950	Linux Distros Unpatched Vulnerability : CVE-2026-45078	Nessus	Misc.	2026/5/29	2026/9/29	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium