PT-2020-14198 · Synergy+1 · Synergy+1

Published 2020-07-15 · Updated 2024-04-08 · CVE-2020-15117

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Synergy versions prior to 1.12.0

Description The issue allows a Synergy server to be crashed by receiving a kMsgHelloBack packet with a client name length set to 0xffffffff (4294967295) if the server's memory is less than 4 GB. However, it was verified that this issue does not cause a crash through the exception handler if the available memory of the server is more than 4GB.

Recommendations For versions prior to 1.12.0, update to version 1.12.0 or later to resolve the issue. As a temporary workaround, consider ensuring the server has more than 4GB of available memory to prevent the crash through the exception handler.

Fix

Improper Check for Exceptional Conditions

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-754

CWE-755

Related Identifiers

ALT-PU-2020-4219

ALT-PU-2020-4220

CVE-2020-15117

GHSA-CHFM-333Q-GFPP

MGASA-2021-0040

Affected Products

Alt Linux

Synergy

References · 17

• https://github.com/symless/synergy-core/commit/0a97c2be0da2d0df25cb86dfd642429e7a8bea39 · Patch
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WAQYCMBWNVCIEM27NPIKK3DGJCNBYLAK · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15117 · Security Note
• https://cve.org/CVERecord?id=CVE-2020-15117 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-15117 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-15117 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0040 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VFDEQED64YLWQK2TF73EMXZDYX7YT2DD · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0040.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/VFDEQED64YLWQK2TF73EMXZDYX7YT2DD · Vendor Advisory
• https://github.com/symless/synergy-core/security/advisories/GHSA-chfm-333q-gfpp · Note
• https://github.com/symless/synergy-core/releases/tag/1.11.0-stable · Note
• https://github.com/symless/synergy-core/releases/tag/v1.11.1-stable · Note
• https://github.com/symless/synergy-core/releases/tag/v1.12.0-stable · Note