CVE-2015-1822 in chrony
Sumário (Inglês)
chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a large number of command requests.
Reservar
17/02/2015
Divulgação
16/04/2015
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 74990 | chrony Negação de Serviço | 17 | Não definido | Correção oficial | CVE-2015-1822 |