VULNERABILITY INTELLIGENCE

CVE-2010-0293

CVSS score5 MEDIUM
EPSS probability2.67%
CISA KEVNot currently listed
Published2010-02-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.

Primary references