CVE-2010-0293
published 2010-02-08CVE-2010-0293: The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows…
PriorityP421medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
2.70%
84.2th percentile
The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | chrony | < chrony 1.23-7 (bookworm) | chrony 1.23-7 (bookworm) |
| tuxfamily | chrony | <= 1.23-pre1 | — |
| tuxfamily | chrony | — | — |
| tuxfamily | chrony | — | — |
| tuxfamily | chrony | — | — |
| tuxfamily | chrony | — | — |
| tuxfamily | chrony | — | — |
| tuxfamily | chrony | — | — |
| tuxfamily | chrony | — | — |
| tuxfamily | chrony | — | — |
| tuxfamily | chrony | — | — |
| tuxfamily | chrony | — | — |
| tuxfamily | chrony | >= 0 < 1.23-7 | 1.23-7 |
| tuxfamily | chrony | >= 0 < 1.23-7 | 1.23-7 |
| tuxfamily | chrony | >= 0 < 1.23-7 | 1.23-7 |
| tuxfamily | chrony | >= 0 < 1.23-7 | 1.23-7 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-3vvg-7h3p-gmv3: The client logging functionality in chronyd in Chrony before 1
ghsa_unreviewed·2022-05-02
CVE-2010-0293 [MEDIUM] GHSA-3vvg-7h3p-gmv3: The client logging functionality in chronyd in Chrony before 1
The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.
OSV
CVE-2010-0293: The client logging functionality in chronyd in Chrony before 1
osv·2010-02-08·CVSS 5.0
CVE-2010-0293 [MEDIUM] CVE-2010-0293: The client logging functionality in chronyd in Chrony before 1
The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.
Debian
CVE-2010-0293: chrony - The client logging functionality in chronyd in Chrony before 1.23.1 does not res...
vendor_debian·2010·CVSS 5.0
CVE-2010-0293 [MEDIUM] CVE-2010-0293: chrony - The client logging functionality in chronyd in Chrony before 1.23.1 does not res...
The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.
Scope: local
bookworm: resolved (fixed in 1.23-7)
bullseye: resolved (fixed in 1.23-7)
forky: resolved (fixed in 1.23-7)
sid: resolved (fixed in 1.23-7)
trixie: resolved (fixed in 1.23-7)
No detection rules found.
No public exploits indexed.
http://chrony.tuxfamily.org/News.htmlhttp://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git%3Ba=commit%3Bh=2f63cf448560fdb96b80d8488aae6a15b802a753http://secunia.com/advisories/38428http://secunia.com/advisories/38480http://www.debian.org/security/2010/dsa-1992http://www.securityfocus.com/bid/38106https://bugzilla.redhat.com/show_bug.cgi?id=555367http://chrony.tuxfamily.org/News.htmlhttp://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git%3Ba=commit%3Bh=2f63cf448560fdb96b80d8488aae6a15b802a753http://secunia.com/advisories/38428http://secunia.com/advisories/38480http://www.debian.org/security/2010/dsa-1992http://www.securityfocus.com/bid/38106https://bugzilla.redhat.com/show_bug.cgi?id=555367
2010-02-08
Published