PT-2016-4863 · Chrony+1 · Chrony+1

Matt Street · Publicado 2016-01-26 · Atualizado 2024-06-15 · CVE-2016-1567

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions chrony versions prior to 1.31.2 chrony versions 2.x prior to 2.2.1

Description The issue allows remote attackers to conduct impersonation attacks via an arbitrary trusted key. This is due to the lack of verification of peer associations of symmetric keys when authenticating packets.

Recommendations For chrony versions prior to 1.31.2, update to version 1.31.2 or later. For chrony versions 2.x prior to 2.2.1, update to version 2.2.1 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

ALT-PU-2017-1975

CVE-2016-1567

DLA-414-1

DLA-742-1

MGASA-2016-0038

OPENSUSE-SU-2024:10345-1

Produtos afetados

Alt Linux

Chrony

Referências · 19

• 🔥 http://talosintel.com/reports/TALOS-2016-0071 · Exploit
• https://ubuntu.com/security/CVE-2016-1567 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2016-0038 · Aviso do Fabricante
• http://chrony.tuxfamily.org/news.html#_20_jan_2016_chrony_2_2_1_and_chrony_1_31_2_released · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10345-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1567 · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175969.html · Aviso do Fabricante, Correção
• https://advisories.mageia.org/MGASA-2016-0038.html · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2016-1567 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-1567 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-0021 · Nota
• https://suse.com/security/cve/CVE-2012-4503 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-1567 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=17605 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-1567 · Aviso do Fabricante