Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2017-1975

Высокий

ALT-PU-2017-1975: package chrony update to version 3.1-alt1.S1

Источник
errata.altlinux.org
Дата публикации
04.08.2017
Дата обновления
04.08.2017
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades chrony to version 3.1-alt1.S1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 8.1
ubuntu
почти 11 лет назад

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."

redhat
почти 11 лет назад

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."

CVSS3: 8.1
nvd
почти 11 лет назад

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."

CVSS3: 8.1
debian
почти 11 лет назад

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associati ...

CVSS3: 8.1
github
больше 4 лет назад

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."