CVE-2010-0292

概要

参考情報

• chrony.tuxfamily.org/News.html · Vendor Advisory
• git.tuxfamily.org/chrony/chrony.git
• secunia.com/advisories/38428 · Vendor Advisory
• secunia.com/advisories/38480 · Vendor Advisory
• debian.org/security/2010/dsa-1992
• securityfocus.com/bid/38106 · Patch
• bugzilla.redhat.com/show_bug.cgi

chrony のその他の脆弱性

• CVE-2020-14367中 6.0A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chr…
• CVE-2015-1853中 6.5chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers wi…
• CVE-2016-1567高 8.1chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow r…
• CVE-2015-1822中 6.5chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote…
• CVE-2015-1821中 6.5Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service (chronyd crash) or possibl…