CVE		CVE-2010-0293
Status		Candidate
Description		The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.
Severity		Medium
CVSS score		5
CVSS vector		(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Phase		Assigned (09.02.2010)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-0293
References		BID : 38106
		CONFIRM : http://chrony.tuxfamily.org/News.html
		CONFIRM : http://git.tuxfamily.org/chrony/chrony.git/?p=gitr...
		CONFIRM : https://bugzilla.redhat.com/show_bug.cgi?id=555367
		DEBIAN : DSA-1992
		SECUNIA : 38428
		SECUNIA : 38480
SecurityVulns:		chrony multiple security vulnerabilities