CVE-2015-1853
chrony: authentication doesn't protect symmetric associations against DoS attacks
Severity
ModerateRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · April 7, 2015
Updated · November 22, 2025
Description
A denial of service flaw was found in the way chrony hosts that were peering with each other authenticated themselves before updating their internal state variables. An attacker could send packets to one peer host, which could cascade to other peers, and stop the synchronization process among the reached peers.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 4.3AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-345 · Insufficient Verification of Data Authenticity