CVE-2010-0294

Publication date 8 February 2010

Last updated 24 July 2024


Ubuntu priority

Description

chronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a syslog message for each unauthorized cmdmon packet, which allows remote attackers to cause a denial of service (disk consumption) via a large number of invalid packets.

Status

Package Ubuntu Release Status
chrony 9.10 karmic
Fixed 1.23-6+lenny1build0.9.10.1
9.04 jaunty
Fixed 1.23-6+lenny1build0.9.04.1
8.10 intrepid Ignored end of life, was needed
8.04 LTS hardy
Fixed 1.21z-5+etch1build0.8.04.1
6.06 LTS dapper Ignored end of life