CVE-2015-1853

chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service (inability to synchronize) via random timestamps in crafted NTP data packets.

• http://chrony.tuxfamily.org/News.htmlRelease Notes, Vendor Advisory
• https://security.gentoo.org/glsa/201507-01Third Party Advisory
• http://chrony.tuxfamily.org/News.htmlRelease Notes, Vendor Advisory
• https://security.gentoo.org/glsa/201507-01Third Party Advisory

Published

Dec 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1847Directory traversal vulnerability in the web request/respons…
• CVE-2015-1848The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not se…
• CVE-2015-1849AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Applicat…
• CVE-2015-1850Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-1851OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before…
• CVE-2015-1852The s3_token middleware in OpenStack keystonemiddleware befo…
• CVE-2015-1854389 Directory Server before 1.3.3.10 allows attackers to byp…
• CVE-2015-1855verify_certificate_identity in the OpenSSL extension in Ruby…5.9
• CVE-2015-1856OpenStack Object Storage (Swift) before 2.3.0, when allow_ve…
• CVE-2015-1857The odl-mdsal-apidocs feature in OpenDaylight Helium allow r…5.3
• CVE-2015-1858Multiple buffer overflows in gui/image/qbmphandler.cpp in th…
• CVE-2015-1859Multiple buffer overflows in plugins/imageformats/ico/qicoha…