CVE-2010-0292

Description

References

• chrony.tuxfamily.org/News.html · Vendor Advisory
• git.tuxfamily.org/chrony/chrony.git
• secunia.com/advisories/38428 · Vendor Advisory
• secunia.com/advisories/38480 · Vendor Advisory
• debian.org/security/2010/dsa-1992
• securityfocus.com/bid/38106 · Patch
• bugzilla.redhat.com/show_bug.cgi

chrony의 다른 취약점

• CVE-2020-14367보통 6.0A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chr…
• CVE-2015-1853보통 6.5chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers wi…
• CVE-2016-1567높음 8.1chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow r…
• CVE-2015-1822보통 6.5chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote…
• CVE-2015-1821보통 6.5Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service (chronyd crash) or possibl…