CVE-2015-1822

概要

参考情報

• listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html · Patch
• debian.org/security/2015/dsa-3222
• oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
• securityfocus.com/bid/73956
• security.gentoo.org/glsa/201507-01

chrony のその他の脆弱性

• CVE-2020-14367中 6.0A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chr…
• CVE-2015-1853中 6.5chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers wi…
• CVE-2016-1567高 8.1chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow r…
• CVE-2015-1821中 6.5Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service (chronyd crash) or possibl…
• CVE-2012-4503中 5.0cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to …