316 matches found
CVE-2010-0293
The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service memory consumption via spoofed 1 NTP or 2 cmdmon packets...
CVE-2010-0292
The readfromcmdsocket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service CPU and bandwidth consumption by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a...
CVE-2010-0294
chronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a syslog message for each unauthorized cmdmon packet, which allows remote attackers to cause a denial of service disk consumption via a large number of invalid packets...
CVE-2010-0292
The readfromcmdsocket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service CPU and bandwidth consumption by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a...
CVE-2010-0293
The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service memory consumption via spoofed 1 NTP or 2 cmdmon packets...
CVE-2010-0293
CVE-2010-0293 affects chronyd in Chrony prior to 1.23.1, where the client logging facility does not cap memory used for storing client information. This can allow remote attackers to exhaust memory via spoofed NTP or cmdmon packets, causing denial of service. Affected software: chronyd/Chrony bef...
CVE-2010-0292
The Chrony CVE-2010-0292 issue affects chronyd’s cmdmon path: read_from_cmd_socket in cmdmon.c allows a spoofed cmdmon packet to trigger a loop of NOHOSTACCESS messages between daemons, causing CPU and network resource exhaustion (DoS). Affected releases are Chrony before 1.23.1 and 1.24-pre1. De...
CVE-2010-0294
CVE-2010-0294 affects chronyd in Chrony prior to 1.23.1 (and possibly 1.24-pre1). The issue: when unauthorized cmdmon packets are received, chronyd logs a syslog entry for each packet, enabling an attacker to cause a denial of service by consuming disk space through a flood of invalid packets. Pu...
CVE-2010-0292
The readfromcmdsocket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service CPU and bandwidth consumption by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a...
Security fix for the ALT Linux 8 package chrony version 1.24-alt1
Feb. 8, 2010 Victor Forsyuk 1.24-alt1 - 1.24. Contains security fixes for CVE-2010-0292, CVE-2010-0293, CVE-2010-0294...
Security fix for the ALT Linux 5 package chrony version 1.24-alt1
Feb. 8, 2010 Victor Forsyuk 1.24-alt1 - 1.24. Contains security fixes for CVE-2010-0292, CVE-2010-0293, CVE-2010-0294...
Security fix for the ALT Linux 6 package chrony version 1.24-alt1
Feb. 8, 2010 Victor Forsyuk 1.24-alt1 - 1.24. Contains security fixes for CVE-2010-0292, CVE-2010-0293, CVE-2010-0294...
[SECURITY] [DSA 1992-1] New chrony packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1992-1 [email protected] http://www.debian.org/security/ Nico Golde February 4th, 2010 http://www.debian.org/security/faq -...
chrony multiple security vulnerabilities
Traffic amplification, resources exhaustion...
[SECURITY] [DSA 1992-1] New chrony packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA-1992-1 [email protected] http://www.debian.org/security/ Nico Golde February 4th, 2010 http://www.debian.org/security/faq -...