Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-0292
HistoryFeb 08, 2010 - 8:30 p.m.

CVE-2010-0292

2010-02-0820:30:00
CWE-399
[email protected]
web.nvd.nist.gov
42
chronyd
chrony
1.23.1
1.24-pre1
denial of service
cpu
bandwidth
spoofed packet
cmdmon
nvd
cve-2010-0292
cve-2009-3563

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.7%

JSON

The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a related issue to CVE-2009-3563.

Related

prion 2
ubuntucve 2
debiancve 2
securityvulns 4
osv 1
nessus 53
openvas 42
debian 2
fedora 5
altlinux 3
f5 3
veracode 1
redhat 3
seebug 1
cert 2
gentoo 1
freebsd_advisory 1
cisco 1
centos 2
checkpoint_advisories 2
oraclelinux 2
cve 1
slackware 1
ubuntu 1
redhatcve 1
vmware 4
prion
prion
Sql injection
2010-02-08 20:30:00
Code injection
2009-12-09 18:30:00
ubuntucve
ubuntucve
CVE-2010-0292
2010-02-08 00:00:00
CVE-2009-3563
2009-12-08 00:00:00
debiancve
debiancve
CVE-2010-0292
2010-02-08 20:30:00
CVE-2009-3563
2009-12-09 18:30:00
securityvulns
securityvulns
[SECURITY] [DSA 1992-1] New chrony packages fix denial of service
2010-02-05 00:00:00
chrony multiple security vulnerabilities
2010-02-05 00:00:00
ntp server DoS
2009-12-09 00:00:00
osv
osv
chrony - denial of service
2010-02-04 00:00:00
nessus
nessus
Debian DSA-1992-1 : chrony - several vulnerabilities
2010-02-24 00:00:00
Fedora 12 : chrony-1.23-8.20081106gitbe42b4.fc12 (2010-1539)
2010-07-01 00:00:00
Fedora 11 : chrony-1.23-6.20081106gitbe42b4.fc11 (2010-1536)
2010-07-01 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1992-1)
2010-02-10 00:00:00
Debian Security Advisory DSA 1992-1 (chrony)
2010-02-10 00:00:00
Fedora Update for chrony FEDORA-2010-1539
2010-03-02 00:00:00
debian
debian
[SECURITY] [DSA 1992-1] New chrony packages fix denial of service
2010-02-04 17:38:45
[SECURITY] [DSA 1948-1] New ntp packages fix denial of service
2009-12-08 19:07:15
fedora
fedora
[SECURITY] Fedora 12 Update: chrony-1.23-8.20081106gitbe42b4.fc12
2010-02-06 00:07:09
[SECURITY] Fedora 11 Update: chrony-1.23-6.20081106gitbe42b4.fc11
2010-02-06 00:05:24
[SECURITY] Fedora 12 Update: ntp-4.2.4p8-1.fc12
2009-12-11 18:14:28
altlinux
altlinux
Security fix for the ALT Linux 8 package chrony version 1.24-alt1
2010-02-08 00:00:00
Security fix for the ALT Linux 5 package chrony version 1.24-alt1
2010-02-08 00:00:00
Security fix for the ALT Linux 6 package chrony version 1.24-alt1
2010-02-08 00:00:00
f5
f5
SOL10905 - NTP vulnerability - CVE-2009-3563
2010-01-04 00:00:00
K10905 : NTP vulnerability - CVE-2009-3563
2013-07-05 00:00:00
K000139026 : NTP vulnerability CVE-2009-3563
2024-03-25 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:42:01
redhat
redhat
(RHSA-2009:1648) Moderate: ntp security update
2009-12-08 00:00:00
(RHSA-2009:1651) Moderate: ntp security update
2009-12-08 00:00:00
(RHSA-2010:0095) Important: rhev-hypervisor security and bug fix update
2010-02-09 00:00:00
seebug
seebug
NTP MODE_PRIVATEζŠ₯ζ–‡θΏœη¨‹ζ‹’η»ζœεŠ‘ζΌζ΄ž
2009-12-12 00:00:00
cert
cert
NTP mode 7 denial-of-service vulnerability
2009-12-08 00:00:00
Implementations of UDP-based application protocols are vulnerable to network loops
2024-03-19 00:00:00
gentoo
gentoo
NTP: Denial of service
2010-01-03 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-10:02.ntpd
2010-01-06 00:00:00
cisco
cisco
Network Time Protocol Package Remote Message Loop Denial of Service Vulnerability
2009-12-08 22:33:40
centos
centos
ntp security update
2009-12-08 22:33:14
ntp security update
2009-12-08 22:18:02
checkpoint_advisories
checkpoint_advisories
Update Protection against Multiple Vendors NTP Mode 7 Denial of Service
2009-01-25 00:00:00
Multiple Vendors NTP Mode 7 Denial of Service (CVE-2009-3563)
2010-02-02 00:00:00
oraclelinux
oraclelinux
ntp security update
2009-12-08 00:00:00
ntp security update
2009-12-08 00:00:00
cve
cve
CVE-2009-3563
2009-12-09 18:30:00
slackware
slackware
[slackware-security] ntp
2009-12-10 08:39:43
ubuntu
ubuntu
Ntp vulnerability
2009-12-08 00:00:00
redhatcve
redhatcve
CVE-2024-2169
2024-04-02 20:21:52
vmware
vmware
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.7%

JSON
Related for CVE-2010-0292
prion2ubuntucve2debiancve2securityvulns4osv1nessus53openvas42debian2fedora5altlinux3f53veracode1redhat3seebug1cert2gentoo1freebsd_advisory1cisco1centos2checkpoint_advisories2oraclelinux2cve1slackware1ubuntu1redhatcve1vmware4