Homepage

Resource Exhaustion The advisory has been revoked - it doesn't affect any version of package sympa  (opens in a new tab)

Threat Intelligence

EPSS
2.92% (86th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DEBIAN9-SYMPA-606498
  • published24 Feb 2020
  • disclosed24 Feb 2020
Report a new vulnerability Found a mistake?

Introduced: 24 Feb 2020

CVE-2020-9369  (opens in a new tab)
CWE-400  (opens in a new tab)

Amendment

The Debian security team deemed this advisory irrelevant for Debian:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream sympa package and not the sympa package as distributed by Debian.

Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files, and a flood of notifications to listmasters) via a series of requests with malformed parameters.

References