CVE-2010-0292

Publication date 8 February 2010

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Description

The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a related issue to CVE-2009-3563.

Status

Package Ubuntu Release Status
chrony 9.10 karmic
Fixed 1.23-6+lenny1build0.9.10.1
9.04 jaunty
Fixed 1.23-6+lenny1build0.9.04.1
8.10 intrepid Ignored end of life, was needed
8.04 LTS hardy
Fixed 1.21z-5+etch1build0.8.04.1
6.06 LTS dapper Ignored end of life

References

Other references

Access our resources on patching vulnerabilities