Lucene search

CVE-2015-1853

🗓️ 09 Dec 2019 19:14:15Reported by redhatType

chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers to cause a denial of service

Reporter	Title	Published	Views	Family All 47
NVD	CVE-2015-1853	9 Dec 201919:15	–	nvd
Cvelist	CVE-2015-1853	9 Dec 201918:53	–	cvelist
UbuntuCve	CVE-2015-1853	9 Dec 201900:00	–	ubuntucve
Prion	Code injection	9 Dec 201919:15	–	prion
Debian CVE	CVE-2015-1853	9 Dec 201919:15	–	debiancve
ArchLinux	chrony: denial of service	8 Apr 201500:00	–	archlinux
Tenable Nessus	Fedora 20 : chrony-1.31.1-1.fc20 (2015-5809)	27 Apr 201500:00	–	nessus
Tenable Nessus	CentOS 7 : chrony (CESA-2015:2241)	2 Dec 201500:00	–	nessus
Tenable Nessus	Scientific Linux Security Update : chrony on SL7.x x86_64 (20151119)	22 Dec 201500:00	–	nessus
Tenable Nessus	GLSA-201507-01 : chrony: Multiple vulnerabilities	6 Jul 201500:00	–	nessus

Nvd

Vulners

Node

tuxfamily chronyRange<1.31.1

[
  {
    "product": "chrony",
    "vendor": "chrony",
    "versions": [
      {
        "status": "affected",
        "version": "before 1.31.1"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/201507-01
chrony	www.chrony.tuxfamily.org/News.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Dec 2019 19:15Current

6.2Medium risk

Vulners AI Score6.2

CVSS24

CVSS36.5

EPSS0.00707