CVE-2020-15117CWE-755

Denial of Service in Synergy

Medium · published July 15, 2020

CVSS v3.1
6.5
EPSS
2%
Percentile
84.6
In the wild
Unconfirmed
What it is

In Synergy before version 1.12.0, a Synergy server can be crashed by receiving a kMsgHelloBack packet with a client name length set to 0xffffffff (4294967295) if the servers memory is less than 4 GB. It was verified that this issue does not cause a crash through the exception handler if the available memory of the Server is more than 4GB.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02494 · 84.6th percentile
Weakness
CWE-755 · Improper Handling of Exceptional Conditions
Published
2020-07-15T17:25Z
EPSS history
Timeline
  • 15 JUL 17:25Z
    Denial of Service in Synergy
    cvelistv5