CVE-2010-0293 - CVE House
Back to Database
Status published Medium CVE-2010-0293

The client logging functionality in chronyd in Chrony before 1.23.1...

Vulnerability Description

The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-0293

Credits & Attribution

No credits recorded in the NVD database.

References

More from tuxfamily

View All →
CVE-2016-1567
chrony before 1.31.2 and 2.x before 2.2.1 do not verify...
High 8.1
CVE-2015-1821
Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated...
Medium 6.5
CVE-2012-4503
cmdmon.c in Chrony before 1.29 allows remote attackers to obtain...
Medium 5
CVE-2012-4502
Multiple integer overflows in pktlength.c in Chrony before 1.29 allow...
Medium 5
CVE-2010-0294
chronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a...
Medium 5

Affected Vendor

Affected Software

chrony
Vulnerable Versions:
0, 1.18, 1.19, 1.19-1, 1.19.99.1, 1.19.99.2, 1.19.99.3, 1.20, 1.21, 1.21-pre1, 1.24-pre1

Timeline

Official Publish: February 8th, 2010
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.