Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

chrony project chrony vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2014-0021
Chrony prior to 1.29.1 has traffic amplification in cmdmon protocol
Chrony Project ChronyDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 19Fedoraproject Fedora 20
NA
CVE-2010-0292
The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony prior to 1.23.1, and 1.24-pre1, allows remote malicious users to cause a denial of service (CPU and bandwidth consumption) by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS mes...
Tuxfamily Chrony 1.19Tuxfamily Chrony 1.20Tuxfamily ChronyTuxfamily Chrony 1.19.99.3Tuxfamily Chrony 1.19-1Tuxfamily Chrony 1.19.99.2Tuxfamily Chrony 1.21-pre1Tuxfamily Chrony 1.18Tuxfamily Chrony 1.24-pre1Tuxfamily Chrony 1.19.99.1Tuxfamily Chrony 1.21
NA
CVE-2010-0293
The client logging functionality in chronyd in Chrony prior to 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote malicious users to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.
Tuxfamily Chrony 1.19Tuxfamily Chrony 1.20Tuxfamily ChronyTuxfamily Chrony 1.19.99.3Tuxfamily Chrony 1.19-1Tuxfamily Chrony 1.19.99.2Tuxfamily Chrony 1.21-pre1Tuxfamily Chrony 1.18Tuxfamily Chrony 1.24-pre1Tuxfamily Chrony 1.19.99.1Tuxfamily Chrony 1.21
NA
CVE-2010-0294
chronyd in Chrony prior to 1.23.1, and possibly 1.24-pre1, generates a syslog message for each unauthorized cmdmon packet, which allows remote malicious users to cause a denial of service (disk consumption) via a large number of invalid packets.
Tuxfamily Chrony 1.19Tuxfamily Chrony 1.20Tuxfamily ChronyTuxfamily Chrony 1.19.99.3Tuxfamily Chrony 1.19-1Tuxfamily Chrony 1.19.99.2Tuxfamily Chrony 1.21-pre1Tuxfamily Chrony 1.18Tuxfamily Chrony 1.24-pre1Tuxfamily Chrony 1.19.99.1Tuxfamily Chrony 1.21
NA
CVE-2009-3563
ntp_request.c in ntpd in NTP prior to 4.2.4p8, and 4.2.5, allows remote malicious users to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE erro...
Ntp NtpNtp Ntp 4.2.2Ntp Ntp 4.2.0Ntp Ntp 4.0.98Ntp Ntp 4.0.72Ntp Ntp 4.0.90Ntp Ntp 4.0.96Ntp Ntp 4.0.93Ntp Ntp 4.1.0Ntp Ntp 4.1.2Ntp Ntp 4.2.5Ntp Ntp 4.0.99Ntp Ntp 4.0.95Ntp Ntp 4.2.2p3Ntp Ntp 4.2.2p2Ntp Ntp 4.0.92Ntp Ntp 4.0.73Ntp Ntp 4.0.97Ntp Ntp 4.0.91Ntp Ntp 4.2.2p1Ntp Ntp 4.0.94
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook