CVE-2010-0294

2010-02-0800:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.012 Low

EPSS

Percentile

85.2%

JSON

chronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a syslog
message for each unauthorized cmdmon packet, which allows remote attackers
to cause a denial of service (disk consumption) via a large number of
invalid packets.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchchrony< 1.21z-5+etch1build0.8.04.1UNKNOWN
ubuntu9.04noarchchrony< 1.23-6+lenny1build0.9.04.1UNKNOWN
ubuntu9.10noarchchrony< 1.23-6+lenny1build0.9.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	chrony	< 1.21z-5+etch1build0.8.04.1	UNKNOWN
ubuntu	9.04	noarch	chrony	< 1.23-6+lenny1build0.9.04.1	UNKNOWN
ubuntu	9.10	noarch	chrony	< 1.23-6+lenny1build0.9.10.1	UNKNOWN