Skip to content
OpenAdvisories
Unscored DSA-1992-1 3 CVEs

chrony - denial of service

Published Feb 4, 2010 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 chrony 1.21z-5+etch1
Debian · 5.0 chrony 1.23-6+lenny1

Vulnerabilities 3

  • Unscored —

    The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attacker…

  • Unscored —

    The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for sto…

  • Unscored —

    chronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a syslog message for each unauthorized cmdmon packet…