344 matches found
Huawei EulerOS: Security Advisory for chrony (EulerOS-SA-2017-1158)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-1853
chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...
DEBIAN-CVE-2015-1853
chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...
CVE-2015-1853
chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...
Code injection
chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...
CVE-2015-1853
chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...
UBUNTU-CVE-2015-1853
chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...
CVE-2015-1853
chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...
CVE-2015-1853
chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...
CVE-2015-1853
CVE-2015-1853 affects chrony with DoS via symmetric NTP associations. Debian/Red Hat/Gentoo advisories describe three related issues: (1) CVE-2015-1853 — symmetric-association state variables could be overwritten by an attacker’s packet, preventing synchronization. (2) CVE-2015-1821 — subnet-size...
CVE-2015-1853
chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...
CVE-2015-1853: Undefined Security Weakness
chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...
DEBIAN-CVE-2014-0021
Chrony before 1.29.1 has traffic amplification in cmdmon protocol...
CVE-2014-0021
Chrony before 1.29.1 has traffic amplification in cmdmon protocol...
CVE-2014-0021
Chrony before 1.29.1 has traffic amplification in cmdmon protocol...
CVE-2014-0021
Chrony before 1.29.1 has traffic amplification in cmdmon protocol...
UBUNTU-CVE-2014-0021
Chrony before 1.29.1 has traffic amplification in cmdmon protocol...
Information disclosure
Chrony before 1.29.1 has traffic amplification in cmdmon protocol...
CVE-2014-0021
Chrony before 1.29.1 is vulnerable to a traffic amplification issue in the cmdmon protocol (CVE-2014-0021). The flaw allows an attacker to exploit chronyd over the network, potentially abusing the protocol’s cmdmon handling. Public records across OSV and Nessus references affirm this CVE affectin...