Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a related issue to CVE-2009-3563.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tuxfamily Chrony 'cmdmon.c' read_from_cmd_socket过程拒绝服务漏洞
Vulnerability Description
chrony是软件开发者Richard Curnow所研发的一套用于维护计算机系统时钟精度的工具。该工具包含chronyd（在系统后台运行的守护进程）和chronyc（用来监控chronyd性能和配置其参数的用户界面）程序。 Chrony 中cmdmon.c文件中的read_from_cmd_socket过程，允许远程攻击者引起拒绝服务漏洞(CPU和内存崩溃)。远程攻击者可以通过发送欺骗cmdmon数据包，引发一系列的两个daemons进程下的NOHOSTACCESS信息的交换。
CVSS Information
N/A
Vulnerability Type
N/A