CVE-2020-10936: High severity sympa sympa vulnerability
Published May 25, 2020
·Updated
Last updated 25 August 2025
Other sources
Sympa before 6.2.56 allows privilege escalation.
— Launchpad
Affected Software
8 affected componentsFixes available
debian/sympa<=6.2.40~dfsg-1, <=6.2.40~dfsg-4
6.2.40~dfsg-56.2.40~dfsg-1+deb10u1
sympa sympa<6.2.56
Fedoraproject Fedora=31
Fedoraproject Fedora=32
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Canonical Ubuntu Linux=14.04
debian/sympa
6.2.60~dfsg-46.2.60~dfsg-4+deb11u16.2.70~dfsg-26.2.76~dfsg-1
Remediation
Event History
May 27, 2020
CVE Published
via MITRE·05:38 PM
Data Sourced
via MITRE·05:38 PM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Feb 20, 2026
Data Sourced
via Ubuntu·03:28 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·03:29 PM
Description
Data Sourced
via Debian·03:29 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-10936?
CVE-2020-10936 has a severity rating that allows for privilege escalation in affected versions of Sympa.
2
How do I fix CVE-2020-10936?
To fix CVE-2020-10936, upgrade Sympa to version 6.2.56 or later.
3
Which versions of Sympa are affected by CVE-2020-10936?
Affected versions of Sympa include those prior to 6.2.56, such as 6.2.40 and earlier.
4
On which platforms can CVE-2020-10936 be found?
CVE-2020-10936 has been identified on Debian and Fedora systems, among others.
5
What type of vulnerability is CVE-2020-10936?
CVE-2020-10936 is a privilege escalation vulnerability that can be exploited to gain unauthorized access.