CVE-2020-9369: High severity sympa sympa vulnerability
Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files, and a flood of notifications to listmasters) via a series of requests with malformed parameters.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/sympato a version that resolves this vulnerability.Fixed in 6.2.40~dfsg-4Fixed in 6.2.40~dfsg-1+deb10u1 - Upgrade
Upgrade
debian/sympato a version that resolves this vulnerability.Fixed in 6.2.60~dfsg-4Fixed in 6.2.70~dfsg-2Fixed in 6.2.72~dfsg-1
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9369?
CVE-2020-9369 has a severity level that can lead to denial of service due to increased disk consumption and notification flooding.
How do I fix CVE-2020-9369?
To fix CVE-2020-9369, upgrade Sympa to version 6.2.53 or later.
Which versions of Sympa are affected by CVE-2020-9369?
CVE-2020-9369 affects Sympa versions from 6.2.38 to 6.2.52.
What kind of attack can exploit CVE-2020-9369?
An attacker can exploit CVE-2020-9369 by sending a series of requests with malformed parameters to cause service disruption.
Is CVE-2020-9369 specific to any operating system?
CVE-2020-9369 is present in various Linux distributions, including Debian and Fedora.