Login Request a demo
High severity · published Jan 26, 2016
CVE-2016-1567
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct…
8.1
CVSS
3%
EPSS
No
On KEV
Description
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrony · Tuxfamily
through 1.31.1; 2.0; 2.1; 2.1.1; 2.2 · source: NVD
Affected product
CH
Chrony
Tuxfamily
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-1567
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-1567
Vendor Advisory
http://chrony.tuxfamily.org/news.html#_20_jan_2016_chrony_2_2_1_and_chrony_1_31_2_released
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176559.html
Patch
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175969.html
Exploit
http://www.talosintel.com/reports/TALOS-2016-0071/
More from Chrony
6.5
CVE-2015-1853
chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a…
6.0
CVE-2020-14367
A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder
–
CVE-2015-1822
chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote authenticated users to cause a denial…
–
CVE-2015-1821
Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service (chronyd crash) or possibly execute arbitrary code by configuring…
–
CVE-2012-4503
cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a…