https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T17:28:44.013539+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2012-4503 Withdrawn: BELL-CVE-2012-4503 — CVE-2012-4503 does not affect BellSoft software 2026-10-16T17:28:44.129205+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/euvd-2026-163580 EUVD-2026-163580 2026-10-16T17:28:44.129249+00:00 EUVD-2026-163580 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4503 fkie_cve-2012-4503 2026-10-16T17:28:44.129265+00:00

cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.

 https://cve.radiocsirt.org/vuln/ghsa-53c9-c34f-h6w7 GHSA-53c9-c34f-h6w7 2026-10-16T17:28:44.129295+00:00

cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.

 https://cve.radiocsirt.org/vuln/gsd-2012-4503 gsd-2012-4503 2026-10-16T17:28:44.129312+00:00 gsd-2012-4503 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10345-1 openSUSE-SU-2024:10345-1 — chrony-2.4.1-1.1 on GA media 2026-10-16T17:28:44.129339+00:00

chrony-2.4.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-4503 Withdrawn: UBUNTU-CVE-2012-4503 2026-10-16T17:28:44.129374+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: chrony, Ubuntu:16.04:LTS: chrony

cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.