CVE-2010-0292

Published Feb 8, 2010

Last updated a year ago

Overview

Description: The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a related issue to CVE-2009-3563.
Source: secalert@redhat.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: CWE-399

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:tuxfamily:chrony:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "90274BAF-E019-4211-AAFF-7C597216F1A6",
            "versionEndIncluding": "1.23-pre1"
          },
          {
            "criteria": "cpe:2.3:a:tuxfamily:chrony:1.18:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BE7B1A16-5E42-4571-BD0A-306E452F88C5"
          },
          {
            "criteria": "cpe:2.3:a:tuxfamily:chrony:1.19:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3876201F-F20D-42DA-912A-17B6108C05A6"
          },
          {
            "criteria": "cpe:2.3:a:tuxfamily:chrony:1.19-1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "43F45EF4-B54C-433B-B01A-6557881BB90C"
          },
          {
            "criteria": "cpe:2.3:a:tuxfamily:chrony:1.19.99.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3E0A3321-1CC7-47C1-A7F1-1FFC0CBA892A"
          },
          {
            "criteria": "cpe:2.3:a:tuxfamily:chrony:1.19.99.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "203D6F3C-367E-4D39-8081-499A4847DB40"
          },
          {
            "criteria": "cpe:2.3:a:tuxfamily:chrony:1.19.99.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F94EADFC-7FAC-47B5-8024-1F1D81F57E02"
          },
          {
            "criteria": "cpe:2.3:a:tuxfamily:chrony:1.20:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FF708CE0-F27C-474D-AB0C-296DCB53F416"
          },
          {
            "criteria": "cpe:2.3:a:tuxfamily:chrony:1.21:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D4B0E62E-A525-4E0C-A5DF-512D79D7A68A"
          },
          {
            "criteria": "cpe:2.3:a:tuxfamily:chrony:1.21-pre1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "455878C7-0BE9-4C40-85BF-A320064D4768"
          },
          {
            "criteria": "cpe:2.3:a:tuxfamily:chrony:1.24-pre1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FF03B21E-3BED-452C-AE1C-3951DEA930AC"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References