CVE-2015-1853

chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP…

published December 9, 2019

CVSS
—
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service (inability to synchronize) via random timestamps in crafted NTP data packets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01696 · 76.8th percentile
Published
2019-12-09T18:53Z
EPSS history
Timeline
  • 09 DEC 18:53Z
    chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP…
    cvelistv5