Vulnerabilities in chrony

2 results
CVE-2014-0021—Chrony before 1.29.1 has traffic amplification in cmdmon protocolEPSS 3.8%CVE-2015-1853—chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers wiEPSS 1.7%