PT-2022-8578 · Unknown · Supybot-Fedora

Ryanlerch · Published 2022-10-18 · Updated 2025-05-13 · CVE-2020-15853

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions supybot-fedora (affected versions not specified)

Description The issue is related to the 'refresh' command in supybot-fedora, which refreshes the cache of all users from FAS. This process takes a significant amount of time to complete, causing zodbot to stop responding to requests during this time.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2020-15853

Affected Products

Supybot-Fedora

References · 5

• https://osv.dev/vulnerability/CVE-2020-15853 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15853 · Security Note
• https://github.com/fedora-infra/supybot-fedora/issues/69 · Note
• https://t.me/cvenotify/121945 · Telegram Post
• https://t.me/cibsecurity/51670 · Telegram Post