Vulnerabilities > Tuxfamily > Chrony > 2.1.1

DATE CVE VULNERABILITY TITLE RISK
2020-08-24 CVE-2020-14367 Link Following vulnerability in multiple products
A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder.
local
low complexity
tuxfamily fedoraproject canonical CWE-59
6.0
2016-01-26 CVE-2016-1567 7PK - Security Features vulnerability in Tuxfamily Chrony
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
network
tuxfamily CWE-254
6.8