https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:51:21 +0000 https://db.gcve.eu/vuln/cve-2020-14367 <p><strong>Affected:</strong> Chrony</p> <p>A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup while still running as the root user, and when it&#39;s opened for writing, chronyd does not check for an existing symbolic link with the same file name. This flaw allows an attacker with privileged access to create a symlink with the default PID file name pointing to any destination file in the system, resulting in data loss and a denial of service due to the path traversal.</p> <p><strong>Affected:</strong> Chrony</p> <p>A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup while still running as the root user, and when it&#39;s opened for writing, chronyd does not check for an existing symbolic link with the same file name. This flaw allows an attacker with privileged access to create a symlink with the default PID file name pointing to any destination file in the system, resulting in data loss and a denial of service due to the path traversal.</p> https://db.gcve.eu/vuln/cve-2020-14367 https://db.gcve.eu/vuln/usn-4475-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: chrony, Ubuntu:20.04:LTS: chrony</p> <p>It was discovered that Chrony incorrectly handled certain symbolic links. An attacker could possibly use this issue to cause a denial of service or expose sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: chrony, Ubuntu:20.04:LTS: chrony</p> <p>It was discovered that Chrony incorrectly handled certain symbolic links. An attacker could possibly use this issue to cause a denial of service or expose sensitive information.</p> https://db.gcve.eu/vuln/usn-4475-1