CVE-2015-1822
chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and daemon crash) or…
Does this matter?
Lower severity and a low EPSS score (2.94%). Track it; it rarely justifies an emergency change on its own.
Description
chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a large number of command requests.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 2.94% probability · 86th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-17
- Affected
- debian/debian linux · tuxfamily/chrony
- Source
- secalert@redhat.com
References
- http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.htmlPatch, Vendor Advisory
- http://www.debian.org/security/2015/dsa-3222
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/73956
- https://security.gentoo.org/glsa/201507-01
- http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.htmlPatch, Vendor Advisory
- http://www.debian.org/security/2015/dsa-3222
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/73956
- https://security.gentoo.org/glsa/201507-01
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.