[{"CVE":"CVE-2020-14367","severity":"moderate","public_date":"2020-08-19T17:10:00Z","advisories":[],"bugzilla":"1870298","bugzilla_description":"CVE-2020-14367 chrony: Insecure writing to PID file","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59->CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14367.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L","cvss3_score":"5.1"},{"CVE":"CVE-2016-1567","severity":"low","public_date":"2016-01-20T00:00:00Z","advisories":[],"bugzilla":"1297472","bugzilla_description":"CVE-2016-1567 chrony: missing key check allows impersonation between authenticated peers (VU#357792)","cvss_score":3.6,"cvss_scoring_vector":"AV:N/AC:H/Au:S/C:N/I:P/A:P","CWE":"CWE-304","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1567.json"},{"CVE":"CVE-2015-1853","severity":"moderate","public_date":"2015-04-07T00:00:00Z","advisories":["RHSA-2015:2241"],"bugzilla":"1209572","bugzilla_description":"CVE-2015-1853 chrony: authentication doesn't protect symmetric associations against DoS attacks","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-345","affected_packages":["chrony-0:2.1.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1853.json"},{"CVE":"CVE-2015-1821","severity":"moderate","public_date":"2015-04-07T00:00:00Z","advisories":["RHSA-2015:2241"],"bugzilla":"1209631","bugzilla_description":"CVE-2015-1821 chrony: Heap out of bound write in address filter","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"(CWE-122|CWE-787)","affected_packages":["chrony-0:2.1.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1821.json"},{"CVE":"CVE-2015-1822","severity":"moderate","public_date":"2015-04-07T00:00:00Z","advisories":["RHSA-2015:2241"],"bugzilla":"1209632","bugzilla_description":"CVE-2015-1822 chrony: uninitialized pointer in cmdmon reply slots","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-456","affected_packages":["chrony-0:2.1.1-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1822.json"},{"CVE":"CVE-2014-0021","severity":"low","public_date":"2014-01-16T00:00:00Z","advisories":[],"bugzilla":"1054790","bugzilla_description":"CVE-2014-0021 chrony: DDoS via amplification in cmdmon protocol","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0021.json"},{"CVE":"CVE-2012-4502","severity":"moderate","public_date":"2013-08-09T00:00:00Z","advisories":[],"bugzilla":"846392","bugzilla_description":"CVE-2012-4502 CVE-2012-4503 chrony: Two security flaws fixed in chrony-1.29 release","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4502.json"},{"CVE":"CVE-2012-4503","severity":"moderate","public_date":"2013-08-09T00:00:00Z","advisories":[],"bugzilla":"846392","bugzilla_description":"CVE-2012-4502 CVE-2012-4503 chrony: Two security flaws fixed in chrony-1.29 release","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4503.json"}]