CVE-2020-14367
Medium
Description
A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup while still running as the root user, and when it's opened for writing, chronyd does not check for an existing symbolic link with the same file name. This flaw allows an attacker with privileged access to create a symlink with the default PID file name pointing to any destination file in the system, resulting in data loss and a denial of service due to the path traversal.
SeverityMedium
CVSS6.0
Exploit probability—
Product
Tuxfamily Chrony
PublishedAug 24, 2020
First seenAug 24, 2020
Weakness typeCWE-59Improper link resolution
How to fix
Update
- tuxfamily chrony3.5.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tuxfamily chrony | v < 3.5.1 | 3.5.1 |
| fedoraproject fedora | 32 | — |
| canonical ubuntu_linux | 18.04, 20.04 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.