Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-0292
HistoryFeb 08, 2010 - 8:30 p.m.

CVE-2010-0292

2010-02-0820:30:00
CWE-399
[email protected]
web.nvd.nist.gov
1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

AI Score

Confidence

High

0.965 High

EPSS

Percentile

99.6%

JSON

The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a related issue to CVE-2009-3563.

Affected configurations

NVD
Node
tuxfamilychronyRange≀1.23-pre1
OR
tuxfamilychronyMatch1.18
OR
tuxfamilychronyMatch1.19
OR
tuxfamilychronyMatch1.19-1
OR
tuxfamilychronyMatch1.19.99.1
OR
tuxfamilychronyMatch1.19.99.2
OR
tuxfamilychronyMatch1.19.99.3
OR
tuxfamilychronyMatch1.20
OR
tuxfamilychronyMatch1.21
OR
tuxfamilychronyMatch1.21-pre1
OR
tuxfamilychronyMatch1.24-pre1

Related

ubuntucve 2
cve 2
prion 2
cvelist 2
debiancve 2
nessus 53
osv 1
securityvulns 4
openvas 42
debian 2
f5 3
veracode 1
redhat 3
centos 2
fedora 5
cert 2
gentoo 1
seebug 1
oraclelinux 2
slackware 1
checkpoint_advisories 2
nvd 1
ubuntu 1
freebsd_advisory 1
cisco 1
redhatcve 1
altlinux 3
vmware 4
ubuntucve
ubuntucve
CVE-2010-0292
2010-02-08 00:00:00
CVE-2009-3563
2009-12-08 00:00:00
cve
cve
CVE-2010-0292
2022-10-03 16:21:10
CVE-2009-3563
2009-12-09 18:30:00
prion
prion
Sql injection
2010-02-08 20:30:00
Code injection
2009-12-09 18:30:00
cvelist
cvelist
CVE-2010-0292
2022-10-03 16:21:10
CVE-2009-3563
2009-12-09 00:00:00
debiancve
debiancve
CVE-2010-0292
2022-10-03 16:21:10
CVE-2009-3563
2009-12-09 18:30:00
nessus
nessus
Debian DSA-1992-1 : chrony - several vulnerabilities
2010-02-24 00:00:00
AIX 6.1 TL 2 : xntpd (IZ71613)
2013-01-24 00:00:00
AIX 5.3 TL 11 : xntpd (IZ71610)
2013-01-24 00:00:00
osv
osv
chrony - denial of service
2010-02-04 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1992-1] New chrony packages fix denial of service
2010-02-05 00:00:00
ntp server DoS
2009-12-09 00:00:00
[USN-867-1] Ntp vulnerability
2009-12-09 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1992-1)
2010-02-10 00:00:00
Debian Security Advisory DSA 1992-1 (chrony)
2010-02-10 00:00:00
FreeBSD Security Advisory (FreeBSD-SA-10:02.ntpd.asc)
2010-01-11 00:00:00
debian
debian
[SECURITY] [DSA 1992-1] New chrony packages fix denial of service
2010-02-04 17:38:45
[SECURITY] [DSA 1948-1] New ntp packages fix denial of service
2009-12-08 19:07:15
f5
f5
SOL10905 - NTP vulnerability - CVE-2009-3563
2010-01-04 00:00:00
K10905 : NTP vulnerability - CVE-2009-3563
2013-07-05 00:00:00
K000139026 : NTP vulnerability CVE-2009-3563
2024-03-25 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:42:01
redhat
redhat
(RHSA-2009:1648) Moderate: ntp security update
2009-12-08 00:00:00
(RHSA-2009:1651) Moderate: ntp security update
2009-12-08 00:00:00
(RHSA-2010:0095) Important: rhev-hypervisor security and bug fix update
2010-02-09 00:00:00
centos
centos
ntp security update
2009-12-08 22:33:14
ntp security update
2009-12-08 22:18:02
fedora
fedora
[SECURITY] Fedora 12 Update: ntp-4.2.4p8-1.fc12
2009-12-11 18:14:28
[SECURITY] Fedora 11 Update: ntp-4.2.4p7-3.fc11
2009-12-11 18:23:49
[SECURITY] Fedora 11 Update: chrony-1.23-6.20081106gitbe42b4.fc11
2010-02-06 00:05:24
cert
cert
NTP mode 7 denial-of-service vulnerability
2009-12-08 00:00:00
Implementations of UDP-based application protocols are vulnerable to network loops
2024-03-19 00:00:00
gentoo
gentoo
NTP: Denial of service
2010-01-03 00:00:00
seebug
seebug
NTP MODE_PRIVATEζŠ₯ζ–‡θΏœη¨‹ζ‹’η»ζœεŠ‘ζΌζ΄ž
2009-12-12 00:00:00
oraclelinux
oraclelinux
ntp security update
2009-12-08 00:00:00
ntp security update
2009-12-08 00:00:00
slackware
slackware
[slackware-security] ntp
2009-12-10 08:39:43
checkpoint_advisories
checkpoint_advisories
Multiple Vendors NTP Mode 7 Denial of Service (CVE-2009-3563)
2010-02-02 00:00:00
Update Protection against Multiple Vendors NTP Mode 7 Denial of Service
2009-01-25 00:00:00
nvd
nvd
CVE-2009-3563
2009-12-09 18:30:00
ubuntu
ubuntu
Ntp vulnerability
2009-12-08 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-10:02.ntpd
2010-01-06 00:00:00
cisco
cisco
Network Time Protocol Package Remote Message Loop Denial of Service Vulnerability
2009-12-08 22:33:40
redhatcve
redhatcve
CVE-2024-2169
2024-04-02 20:21:52
altlinux
altlinux
Security fix for the ALT Linux 5 package chrony version 1.24-alt1
2010-02-08 00:00:00
Security fix for the ALT Linux 8 package chrony version 1.24-alt1
2010-02-08 00:00:00
Security fix for the ALT Linux 6 package chrony version 1.24-alt1
2010-02-08 00:00:00
vmware
vmware
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

AI Score

Confidence

High

0.965 High

EPSS

Percentile

99.6%

JSON
Related for NVD:CVE-2010-0292
ubuntucve2cve2prion2cvelist2debiancve2nessus53osv1securityvulns4openvas42debian2f53veracode1redhat3centos2fedora5cert2gentoo1seebug1oraclelinux2slackware1checkpoint_advisories2nvd1ubuntu1freebsd_advisory1cisco1redhatcve1altlinux3vmware4