CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-1853

chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service (inability to synchronize) via random timestamps in crafted NTP data packets.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.009

EPSS Ranking 74.8%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.0

References

Products affected by CVE-2015-1853

Tuxfamily » Chrony » Version: 1.0

cpe:2.3:a:tuxfamily:chrony:1.0
Tuxfamily » Chrony » Version: 1.1

cpe:2.3:a:tuxfamily:chrony:1.1
Tuxfamily » Chrony » Version: 1.18

cpe:2.3:a:tuxfamily:chrony:1.18
Tuxfamily » Chrony » Version: 1.19

cpe:2.3:a:tuxfamily:chrony:1.19
Tuxfamily » Chrony » Version: 1.19.99.1

cpe:2.3:a:tuxfamily:chrony:1.19.99.1
Tuxfamily » Chrony » Version: 1.19.99.2

cpe:2.3:a:tuxfamily:chrony:1.19.99.2
Tuxfamily » Chrony » Version: 1.19.99.3

cpe:2.3:a:tuxfamily:chrony:1.19.99.3
Tuxfamily » Chrony » Version: 1.20

cpe:2.3:a:tuxfamily:chrony:1.20
Tuxfamily » Chrony » Version: 1.21

cpe:2.3:a:tuxfamily:chrony:1.21
Tuxfamily » Chrony » Version: 1.23

cpe:2.3:a:tuxfamily:chrony:1.23
Tuxfamily » Chrony » Version: 1.23.1

cpe:2.3:a:tuxfamily:chrony:1.23.1
Tuxfamily » Chrony » Version: 1.24

cpe:2.3:a:tuxfamily:chrony:1.24
Tuxfamily » Chrony » Version: 1.25

cpe:2.3:a:tuxfamily:chrony:1.25
Tuxfamily » Chrony » Version: 1.26

cpe:2.3:a:tuxfamily:chrony:1.26
Tuxfamily » Chrony » Version: 1.27

cpe:2.3:a:tuxfamily:chrony:1.27
Tuxfamily » Chrony » Version: 1.28

cpe:2.3:a:tuxfamily:chrony:1.28
Tuxfamily » Chrony » Version: 1.29

cpe:2.3:a:tuxfamily:chrony:1.29
Tuxfamily » Chrony » Version: 1.31

cpe:2.3:a:tuxfamily:chrony:1.31

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-1853

Products

Pricing

Contact Us