CVE-2020-15117

In Synergy before version 1.12.0, a Synergy server can be crashed by receiving a kMsgHelloBack packet with a client name length set to 0xffffffff (4294967295) if the servers memory is less than 4 GB. It was verified that this issue does not cause a crash through the exception handler if the available memory of the Server is more than 4GB.

• CWE-755
• CWE-754

• https://github.com/symless/synergy-core/commit/0a97c2be0da2d0df25cb86dfd642429e7a8bea39Patch, Third Party Advisory
• https://github.com/symless/synergy-core/security/advisories/GHSA-chfm-333q-gfppThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VFDEQED64YLWQK2TF73EMXZDYX7YT2DD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WAQYCMBWNVCIEM27NPIKK3DGJCNBYLAK/
• https://github.com/symless/synergy-core/commit/0a97c2be0da2d0df25cb86dfd642429e7a8bea39Patch, Third Party Advisory
• https://github.com/symless/synergy-core/security/advisories/GHSA-chfm-333q-gfppThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VFDEQED64YLWQK2TF73EMXZDYX7YT2DD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WAQYCMBWNVCIEM27NPIKK3DGJCNBYLAK/

Published

Jul 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15110In jupyterhub-kubespawner before 0.12, certain usernames wil…8.1
• CVE-2020-15111In Fiber before version 1.12.6, the filename that is given i…5.4
• CVE-2020-15112In etcd before versions 3.3.23 and 3.4.10, it is possible to…6.5
• CVE-2020-15113In etcd before versions 3.3.23 and 3.4.10, certain directory…7.1
• CVE-2020-15114In etcd before versions 3.3.23 and 3.4.10, the etcd gateway …7.7
• CVE-2020-15115etcd before versions 3.3.23 and 3.4.10 does not perform any …7.5
• CVE-2020-15118In Wagtail before versions 2.7.4 and 2.9.3, when a form page…5.4
• CVE-2020-15119In auth0-lock versions before and including 11.25.1, dangero…5.4
• CVE-2020-1512An information disclosure vulnerability exists when the Wind…7.8
• CVE-2020-15120In "I hate money" before version 4.1.5, an authenticated mem…4.9
• CVE-2020-15121In radare2 before version 4.5.0, malformed PDB file names in…9.6
• CVE-2020-15123In codecov (npm package) before version 3.7.1 the upload met…9.3