CVE-2020-15117: Fedoraproject Fedora

Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days.

In Synergy before version 1.12.0, a Synergy server can be crashed by receiving a kMsgHelloBack packet with a client name length set to 0xffffffff (4294967295) if the servers memory is less than 4 GB. It was verified that this issue does not cause a crash through the exception handler if the available memory of the Server is more than 4GB.

Affected products

• Fedoraproject Fedora: version 32 only; version 33 only
• Symless Synergy: before 1.12.0 (fixed in 1.12.0)

Published 2020-07-15. Last modified 2026-06-17.