The client logging functionality in chronyd in Chrony before 1.23.1 does
not restrict the amount of memory used for storage of client information,
which allows remote attackers to cause a denial of service (memory
consumption) via spoofed (1) NTP or (2) cmdmon packets.