CVE-2010-0293

The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.

• CWE-399

• http://chrony.tuxfamily.org/News.htmlVendor Advisory
• http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git%3Ba=commit%3Bh=2f63cf448560fdb96b80d8488aae6a15b802a753
• http://secunia.com/advisories/38428Vendor Advisory
• http://secunia.com/advisories/38480Vendor Advisory
• http://www.debian.org/security/2010/dsa-1992
• http://www.securityfocus.com/bid/38106
• https://bugzilla.redhat.com/show_bug.cgi?id=555367
• http://chrony.tuxfamily.org/News.htmlVendor Advisory
• http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git%3Ba=commit%3Bh=2f63cf448560fdb96b80d8488aae6a15b802a753
• http://secunia.com/advisories/38428Vendor Advisory
• http://secunia.com/advisories/38480Vendor Advisory
• http://www.debian.org/security/2010/dsa-1992
• http://www.securityfocus.com/bid/38106
• https://bugzilla.redhat.com/show_bug.cgi?id=555367

Published

Feb 8, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0287Directory traversal vulnerability in the ACL Manager plugin …
• CVE-2010-0288A typo in the administrator permission check in the ACL Mana…
• CVE-2010-0289Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2010-0290Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9…
• CVE-2010-0291The Linux kernel before 2.6.32.4 allows local users to gain …
• CVE-2010-0292The read_from_cmd_socket function in cmdmon.c in chronyd in …
• CVE-2010-0294chronyd in Chrony before 1.23.1, and possibly 1.24-pre1, gen…
• CVE-2010-0295lighttpd before 1.4.26, and 1.5.x, allocates a buffer for ea…
• CVE-2010-0296The encode_name macro in misc/mntent_r.c in the GNU C Librar…
• CVE-2010-0297Buffer overflow in the usb_host_handle_control function in t…
• CVE-2010-0298The x86 emulator in KVM 83 does not use the Current Privileg…
• CVE-2010-0299openSUSE 11.2 installs the devtmpfs root directory with inse…