https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T17:51:18.528867+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2020-14367 CVE-2020-14367 2026-10-02T17:51:18.587523+00:00

Affected: Chrony

A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup while still running as the root user, and when it's opened for writing, chronyd does not check for an existing symbolic link with the same file name. This flaw allows an attacker with privileged access to create a symlink with the default PID file name pointing to any destination file in the system, resulting in data loss and a denial of service due to the path traversal.

 https://db.gcve.eu/vuln/usn-4475-1 USN-4475-1 — chrony vulnerability 2026-10-02T17:51:18.587782+00:00

Affected: Ubuntu:18.04:LTS: chrony, Ubuntu:20.04:LTS: chrony

It was discovered that Chrony incorrectly handled certain symbolic links. An attacker could possibly use this issue to cause a denial of service or expose sensitive information.