----------------------------------------------------------------------



Secunia integrated with Microsoft WSUS 
http://secunia.com/blog/71/



----------------------------------------------------------------------

TITLE:
Chrony Denial of Service Security Issue and Vulnerability

SECUNIA ADVISORY ID:
SA38428

VERIFY ADVISORY:
http://secunia.com/advisories/38428/

DESCRIPTION:
A security issue and a vulnerability have been reported in Chrony,
which can be exploited by malicious people to cause a DoS (Denial of
Service).

1) A vulnerability is caused due to an error within the processing of
"cmdmon" packets, which can be exploited to cause a packet reply loop
by sending a specially crafted packet with a spoofed source IP
address to an affected Chrony server.

2) A security issue is caused due to the logging facility not
properly limiting the amount of memory used to store client
information. This can be exploited to cause a DoS due to memory
exhaustion by sending a large number of spoofed NTP or "cmdmon"
packets.

Successful exploitation requires that chronyd allows access from a
wide range of IP addresses (restricted to 127.0.0.1 by default).

NOTE: Additionally, chronyd does not limit the rate for log messages,
which can be used to fill up the disk space.

SOLUTION:
Update to version 1.23.1 or 1.24.
http://chrony.tuxfamily.org/download.html

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://chrony.tuxfamily.org/News.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------