VULNERABILITY INTELLIGENCE

CVE-2010-0292

CVSS score5 MEDIUM
EPSS probability1.75%
CISA KEVNot currently listed
Published2010-02-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a related issue to CVE-2009-3563.

Primary references