CVE-2012-4503 cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to t...
MediumCVSS 5.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/chrony(Debian:12) | < 1.29-1 | 1.29-1 |
| debian/chrony(Debian:13) | < 1.29-1 | 1.29-1 |
| debian/chrony(Debian:14) | < 1.29-1 | 1.29-1 |
| tuxfamily chrony | <= 1.28 | No fix listed |
| tuxfamily chrony | = 1.0 | No fix listed |
| tuxfamily chrony | = 1.1 | No fix listed |
| tuxfamily chrony | = 1.18 | No fix listed |
| tuxfamily chrony | = 1.19 | No fix listed |
| tuxfamily chrony | = 1.19.99.1 | No fix listed |
| tuxfamily chrony | = 1.19.99.2 | No fix listed |
| tuxfamily chrony | = 1.19.99.3 | No fix listed |
| tuxfamily chrony | = 1.20 | No fix listed |
| tuxfamily chrony | = 1.21 | No fix listed |
| tuxfamily chrony | = 1.21-pre1 | No fix listed |
| tuxfamily chrony | = 1.23 | No fix listed |
| tuxfamily chrony | = 1.23-pre1 | No fix listed |
| tuxfamily chrony | = 1.23.1 | No fix listed |
| tuxfamily chrony | = 1.24 | No fix listed |
| tuxfamily chrony | = 1.24-pre1 | No fix listed |
| tuxfamily chrony | = 1.25 | No fix listed |
| tuxfamily chrony | = 1.25-pre1 | No fix listed |
| tuxfamily chrony | = 1.25-pre2 | No fix listed |
| tuxfamily chrony | = 1.26 | No fix listed |
| tuxfamily chrony | = 1.26-pre1 | No fix listed |
| tuxfamily chrony | = 1.27 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| tuxfamily chrony | = 1.27-pre1 | No fix listed |
| tuxfamily chrony | = 1.28-pre1 | No fix listed |
References
- Debian Security Tracker CVE-2012-4503 vendor-advisory
- git.tuxfamily.org
- [chrony-announce] 20130808 chrony-1.29 released (security) mailing-list vendor-advisory
- [oss-security] 20130809 [Not a CVE request, just notification] CVE-2012-4502, CVE-2012-4503 -- Two security flaws fixed in Chrony v1.29 mailing-list patch
- DSA-2760 vendor-advisory
- bugzilla.redhat.com
- bugs.debian.org issue-tracking