CVE-2016-1567

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to…

published January 26, 2016

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03035 · 87.3th percentile
Published
2016-01-26T19:00Z
EPSS history
Timeline
  • 26 JAN 19:00Z
    chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to…
    cvelistv5