Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-0292
HistoryFeb 08, 2010 - 12:00 a.m.

CVE-2010-0292

2010-02-0800:00:00
ubuntu.com
ubuntu.com
14

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.7%

The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before
1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service
(CPU and bandwidth consumption) by sending a spoofed cmdmon packet that
triggers a continuous exchange of NOHOSTACCESS messages between two
daemons, a related issue to CVE-2009-3563.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchchrony<Β 1.21z-5+etch1build0.8.04.1UNKNOWN
ubuntu9.04noarchchrony<Β 1.23-6+lenny1build0.9.04.1UNKNOWN
ubuntu9.10noarchchrony<Β 1.23-6+lenny1build0.9.10.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.7%