CVE-2019-16215

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking. A user who is logged into the server could send a crafted message causing the server to spend an effectively arbitrary amount of CPU time and stall the processing of future messages.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1333

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://blog.zulip.org/2019/09/11/zulip-server-2-0-5-security-release/Vendor Advisory
https://github.com/zulip/zulip/commit/5797f013b3be450c146a4141514bda525f2f1b51Patch, Third Party Advisory
https://blog.zulip.org/2019/09/11/zulip-server-2-0-5-security-release/Vendor Advisory
https://github.com/zulip/zulip/commit/5797f013b3be450c146a4141514bda525f2f1b51Patch, Third Party Advisory

Timeline

Published: Sep 18, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-162165.4Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server could upload files o CVE-2019-162176.1WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled.CVE-2019-162186.1WordPress before 5.2.3 allows XSS in stored comments.CVE-2019-162196.1WordPress before 5.2.3 allows XSS in shortcode previews.CVE-2019-16225.3A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote att CVE-2019-162206.1In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open r CVE-2019-162216.1WordPress before 5.2.3 allows reflected XSS in the dashboard.CVE-2019-162226.1WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site s CVE-2019-162235.4WordPress before 5.2.3 allows XSS in post previews by authenticated users.CVE-2019-162249.8An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leading CVE-2019-162259.8An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch does not properly set up mc->mc_pg[mc->top], leading CVE-2019-162267.5An issue was discovered in py-lmdb 0.97. mdb_node_del does not validate a memmove in the case of an unexpected node->mn_hi, leading to an in