« Volver al listado

CVE-2010-0293

Estado: ModificadaMedia (5)—

The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Tuxfamily — Chrony

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-0293",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-02-08T20:30:01.233",
  "references": [
    {
      "url": "http://chrony.tuxfamily.org/News.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git%3Ba=commit%3Bh=2f63cf448560fdb96b80d8488aae6a15b802a753",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/38428",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/38480",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.debian.org/security/2010/dsa-1992",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/38106",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=555367",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://chrony.tuxfamily.org/News.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git%3Ba=commit%3Bh=2f63cf448560fdb96b80d8488aae6a15b802a753",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/38428",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/38480",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2010/dsa-1992",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/38106",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=555367",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets."
    },
    {
      "lang": "es",
      "value": "La funcionalidad \"client logging\" en chronyd en Chrony anterior a v1.23.1, no restringe la cantidad de memoria empleada para almacenar la información de un cliente, lo que permite a atacantes remotos, provocar una denegación de servicio (consumo de memoria) mediante la suplantación de paquetes (1) NTP o (2) cmdmon."
    }
  ],
  "lastModified": "2026-06-16T23:15:52.493",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tuxfamily:chrony:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90274BAF-E019-4211-AAFF-7C597216F1A6",
              "versionEndIncluding": "1.23-pre1"
            },
            {
              "criteria": "cpe:2.3:a:tuxfamily:chrony:1.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE7B1A16-5E42-4571-BD0A-306E452F88C5"
            },
            {
              "criteria": "cpe:2.3:a:tuxfamily:chrony:1.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3876201F-F20D-42DA-912A-17B6108C05A6"
            },
            {
              "criteria": "cpe:2.3:a:tuxfamily:chrony:1.19-1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43F45EF4-B54C-433B-B01A-6557881BB90C"
            },
            {
              "criteria": "cpe:2.3:a:tuxfamily:chrony:1.19.99.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E0A3321-1CC7-47C1-A7F1-1FFC0CBA892A"
            },
            {
              "criteria": "cpe:2.3:a:tuxfamily:chrony:1.19.99.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "203D6F3C-367E-4D39-8081-499A4847DB40"
            },
            {
              "criteria": "cpe:2.3:a:tuxfamily:chrony:1.19.99.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F94EADFC-7FAC-47B5-8024-1F1D81F57E02"
            },
            {
              "criteria": "cpe:2.3:a:tuxfamily:chrony:1.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF708CE0-F27C-474D-AB0C-296DCB53F416"
            },
            {
              "criteria": "cpe:2.3:a:tuxfamily:chrony:1.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4B0E62E-A525-4E0C-A5DF-512D79D7A68A"
            },
            {
              "criteria": "cpe:2.3:a:tuxfamily:chrony:1.21-pre1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "455878C7-0BE9-4C40-85BF-A320064D4768"
            },
            {
              "criteria": "cpe:2.3:a:tuxfamily:chrony:1.24-pre1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF03B21E-3BED-452C-AE1C-3951DEA930AC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}