UBUNTU-CVE-2015-1853

chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...

CVE-2015-1853

chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...

CVE-2015-1853

CVE-2015-1853 affects chrony with DoS via symmetric NTP associations. Debian/Red Hat/Gentoo advisories describe three related issues: (1) CVE-2015-1853 — symmetric-association state variables could be overwritten by an attacker’s packet, preventing synchronization. (2) CVE-2015-1821 — subnet-size...

CVE-2015-1853

chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...

CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

DEBIAN-CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

Information disclosure

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

UBUNTU-CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

CVE-2014-0021

Chrony before 1.29.1 is vulnerable to a traffic amplification issue in the cmdmon protocol (CVE-2014-0021). The flaw allows an attacker to exploit chronyd over the network, potentially abusing the protocol’s cmdmon handling. Public records across OSV and Nessus references affirm this CVE affectin...

CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

CVE-2014-0021

Chrony before 1.29.1 has traffic amplification in cmdmon protocol...

Moderate: Red Hat Bug Fix Advisory: redhat-virtualization-host bug fix and enhancement update

Updated ​​redhat-virtualization-host packages that fix several bugs and add various enhancements are now available. The imgbased packages provide a way to create read-only base images from squashfs images, and a way to manage writable filesystem layers on top of those base images, including the...

CVE-2019-11331

Network Time Protocol NTP, as specified in RFC 5905, uses port 123 even for modes where a fixed port number is not required, which makes it easier for remote attackers to conduct off-path attacks. Mitigation On Red Hat Enterprise Linux 6 and later, switching from ntp to chrony is recommended. Amo...

EulerOS 2.0 SP2 : chrony (EulerOS-SA-2017-1158)

According to the version of the chrony package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote...

Debian DLA-742-1 : chrony security update

It was discovered that Chrony, a versatile implementation of the Network Time Protocol, did not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a 'skeleton key.' This upda...

[SECURITY] [DLA 742-1] chrony security update

Package : chrony Version : 1.24-3.1+deb7u4 CVE ID : CVE-2016-1567 Debian Bug : 812923 568492 It was discovered that Chrony, a versatile implementation of the Network Time Protocol, did not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers t...

DLA-742-1 chrony - security update

Bulletin has no description...

Fedora 23 : chrony-2.1.1-2.fc23 (2016-6a0b0ab775)

Security fix for CVE-2016-1567 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...