CVE-2010-0293

Publication date 8 February 2010

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
chrony 9.10 karmic
Fixed 1.23-6+lenny1build0.9.10.1
9.04 jaunty
Fixed 1.23-6+lenny1build0.9.04.1
8.10 intrepid Ignored end of life, was needed
8.04 LTS hardy
Fixed 1.21z-5+etch1build0.8.04.1
6.06 LTS dapper Ignored end of life