Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tuxfamily chrony 1.21 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2010-0292
The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony prior to 1.23.1, and 1.24-pre1, allows remote malicious users to cause a denial of service (CPU and bandwidth consumption) by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS mes...
Tuxfamily Chrony 1.19Tuxfamily Chrony 1.20Tuxfamily ChronyTuxfamily Chrony 1.19.99.3Tuxfamily Chrony 1.19-1Tuxfamily Chrony 1.19.99.2Tuxfamily Chrony 1.21-pre1Tuxfamily Chrony 1.18Tuxfamily Chrony 1.24-pre1Tuxfamily Chrony 1.19.99.1Tuxfamily Chrony 1.21
5
CVSSv2
CVE-2010-0293
The client logging functionality in chronyd in Chrony prior to 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote malicious users to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.
Tuxfamily Chrony 1.19Tuxfamily Chrony 1.20Tuxfamily ChronyTuxfamily Chrony 1.19.99.3Tuxfamily Chrony 1.19-1Tuxfamily Chrony 1.19.99.2Tuxfamily Chrony 1.21-pre1Tuxfamily Chrony 1.18Tuxfamily Chrony 1.24-pre1Tuxfamily Chrony 1.19.99.1Tuxfamily Chrony 1.21
5
CVSSv2
CVE-2010-0294
chronyd in Chrony prior to 1.23.1, and possibly 1.24-pre1, generates a syslog message for each unauthorized cmdmon packet, which allows remote malicious users to cause a denial of service (disk consumption) via a large number of invalid packets.
Tuxfamily Chrony 1.19Tuxfamily Chrony 1.20Tuxfamily ChronyTuxfamily Chrony 1.19.99.3Tuxfamily Chrony 1.19-1Tuxfamily Chrony 1.19.99.2Tuxfamily Chrony 1.21-pre1Tuxfamily Chrony 1.18Tuxfamily Chrony 1.24-pre1Tuxfamily Chrony 1.19.99.1Tuxfamily Chrony 1.21
5
CVSSv2
CVE-2012-4502
Multiple integer overflows in pktlength.c in Chrony prior to 1.29 allow remote malicious users to cause a denial of service (crash) via a crafted (1) REQ_SUBNETS_ACCESSED or (2) REQ_CLIENT_ACCESSES command request to the PKL_CommandLength function or crafted (3) RPY_SUBNETS_ACCES...
Tuxfamily Chrony 1.24Tuxfamily Chrony 1.21Tuxfamily Chrony 1.19Tuxfamily Chrony 1.23Tuxfamily Chrony 1.25Tuxfamily Chrony 1.1Tuxfamily Chrony 1.27Tuxfamily Chrony 1.20Tuxfamily ChronyTuxfamily Chrony 1.19.99.3Tuxfamily Chrony 1.23.1Tuxfamily Chrony 1.19.99.2Tuxfamily Chrony 1.0Tuxfamily Chrony 1.28Tuxfamily Chrony 1.18Tuxfamily Chrony 1.26Tuxfamily Chrony 1.19.99.1
5
CVSSv2
CVE-2012-4503
cmdmon.c in Chrony prior to 1.29 allows remote malicious users to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command...
Tuxfamily Chrony 1.24Tuxfamily Chrony 1.21Tuxfamily Chrony 1.19Tuxfamily Chrony 1.23Tuxfamily Chrony 1.25Tuxfamily Chrony 1.1Tuxfamily Chrony 1.27Tuxfamily Chrony 1.20Tuxfamily ChronyTuxfamily Chrony 1.19.99.3Tuxfamily Chrony 1.23.1Tuxfamily Chrony 1.19.99.2Tuxfamily Chrony 1.0Tuxfamily Chrony 1.28Tuxfamily Chrony 1.18Tuxfamily Chrony 1.26Tuxfamily Chrony 1.19.99.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook