CVE-2020-9369

Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files, and a flood of notifications to listmasters) via a series of requests with malformed parameters.

• CWE-400

• https://github.com/sympa-community/sympa/issues/886Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6TMVZ5LVYCCIHGEC7RQUMGUE7DJWUXN7/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A3FUYYLV6URRLAJVWXNJYK2CNOKKNHXC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO4WJYNNHWM7DUKCN4EWYYYPXZSOI7BQ/
• https://sympa-community.github.io/security/2020-001.htmlPatch, Third Party Advisory
• https://www.debian.org/security/2020/dsa-4818Third Party Advisory
• https://github.com/sympa-community/sympa/issues/886Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6TMVZ5LVYCCIHGEC7RQUMGUE7DJWUXN7/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A3FUYYLV6URRLAJVWXNJYK2CNOKKNHXC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO4WJYNNHWM7DUKCN4EWYYYPXZSOI7BQ/
• https://sympa-community.github.io/security/2020-001.htmlPatch, Third Party Advisory
• https://www.debian.org/security/2020/dsa-4818Third Party Advisory

Published

Feb 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9363The Sophos AV parsing engine before 2020-01-14 allows virus-…7.8
• CVE-2020-9364An issue was discovered in helpers/mailer.php in the Creativ…5.3
• CVE-2020-9365An issue was discovered in Pure-FTPd 1.0.49. An out-of-bound…7.5
• CVE-2020-9366A buffer overflow was found in the way GNU Screen before 4.8…9.8
• CVE-2020-9367The MPS Agent in Zoho ManageEngine Desktop Central MSP build…7.8
• CVE-2020-9368The Module Olea Gift On Order module through 5.0.8 for Prest…7.5
• CVE-2020-9370HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijackin…9.1
• CVE-2020-9371Stored XSS exists in the Appointment Booking Calendar plugin…4.8
• CVE-2020-9372The Appointment Booking Calendar plugin before 1.3.35 for Wo…7.8
• CVE-2020-9374On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command ex…9.8
• CVE-2020-9375TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209…7.5
• CVE-2020-9376D-Link DIR-610 devices allow Information Disclosure via SERV…7.5