Summary
It was discovered that Chrony incorrectly handled certain symbolic links.
An attacker could possibly use this issue to cause a denial of service or
expose sensitive information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | chrony | 3.2-4ubuntu4.5 |
| Ubuntu · 20.04 LTS 20.04:LTS | chrony | 3.5-6ubuntu6.2 |
Vulnerabilities 1
-
Unscored —
A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file …
References
-
report
https://ubuntu.com/security/CVE-2020-14367