CVE-2016-1567 in chrony
Summary
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/07/2016
Disclosure
01/26/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 80672 | chrony Key 7pk security | 254 | Not defined | Official fix | CVE-2016-1567 |