CVE-2014-0021

HIGH

chrony < 1.29.1 - Traffic Amplification via cmdmon Protocol

Title source: llm
STIX 2.1

Description

Chrony before 1.29.1 has traffic amplification in cmdmon protocol

References (11)

Core 11
Core References
Third Party Advisory x_refsource_misc
https://security-tracker.debian.org/tracker/CVE-2014-0021
Issue Tracking, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0021
Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2014/01/18/2
Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2014/01/17/9
Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2014/01/18/1
Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2014/01/18/3
Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2014/01/19/1
Third Party Advisory, VDB Entry x_refsource_misc
http://www.securityfocus.com/bid/65035
Third Party Advisory, VDB Entry x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/90925

Scores

CVSS v3 7.5
EPSS 0.0380
EPSS Percentile 88.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (6)
chrony_project/chrony < 1.29
debian/debian_linux 8.0
debian/debian_linux 9.0
debian/debian_linux 10.0
fedoraproject/fedora 19
fedoraproject/fedora 20
Published Nov 15, 2019
Tracked Since Feb 18, 2026