Vulnerability in Tuxfamily Chrony

CVE-2015-1822

chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a large number of command requests.

EPSS: 0.029 (85.7th percentile) — read the EPSS interpretation.

Affected products

Tuxfamily Chrony
Debian Debian_linux — versions 7.0
N/a — versions n/a

Weakness classification (CWE)

CWE-17

References

secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
secalert@redhat.com (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (vendor-advisory, x_refsource_GENTOO)
secalert@redhat.com (vdb-entry, x_refsource_BID)