DEBIAN-CVE-2010-0293

DEBIAN-CVE-2010-0293 PUBLISHED CVSS 8.699999809265137 HIGH

The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.

Risk Scores

CVSS 4.0

8.699999809265137

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
Debian:13	chrony	0, 0, 0
Debian:14	chrony	0, 0, 0
Debian:11	chrony	0, 0, 0
Debian:12	chrony	0, 0, 0

Timeline

Feb 8, 2010 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2010-0293 advisory

Open in Interactive Console →