CVE-2014-0021

HIGH 7.5CVE-2014-0021 · Published 15/11/2019 · updated 17/06/2026

In short

CVE-2014-0021 is a HIGH (CVSS 7.5) vulnerability affecting chrony (chrony project).
Chance of exploitation in the next 30 days (EPSS): 4.2%, higher than 91.0% of all vulnerabilities.
Fix: update to 1.29 or later.

Package	Affected versions	Patched versions
chrony chrony_project	`< 1.29`	`1.29`

Chrony before 1.29.1 has traffic amplification in cmdmon protocol

Running one of these products? Scan your site to see whether it exposes a vulnerable version.