CVE-2015-1853

概要

参考情報

• chrony.tuxfamily.org/News.html · Release Notes
• security.gentoo.org/glsa/201507-01 · Third Party Advisory

chrony のその他の脆弱性

• CVE-2020-14367中 6.0A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chr…
• CVE-2016-1567高 8.1chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow r…
• CVE-2015-1822中 6.5chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote…
• CVE-2015-1821中 6.5Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service (chronyd crash) or possibl…
• CVE-2012-4503中 5.0cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to …