CVE catalog

CVE-2012-4503

chrony: CVE-2012-4503

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
3.08% · Oct 25, 2026

cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianchronysid4.9-2fixed
Debianchronyforky4.9-2fixed
Debianchronytrixie4.6.1-3+deb13u2fixed
Debianchronybookworm4.3-2+deb12u3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianchronysourcesid1.29-1not yet assignedNot reported[719203]
Debianchronysourceforky1.29-1not yet assignedNot reported[719203]
Debianchronysourcetrixie1.29-1not yet assignedNot reported[719203]
Debianchronysourcebookworm1.29-1not yet assignedNot reported[719203]

[Debian bug #719203]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [chrony]Fixed
    Details (2)

    • 4.3-2+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 1.29-1

      dsa · chrony · debian · bookworm; dsa · chrony · debian · 12

    • 4.3-2+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 1.29-1

      dsa · chrony · debian · bookworm; dsa · chrony · debian · 12

[Debian 13 (Trixie)]

  • [chrony]Fixed
    Details (2)

    • 4.6.1-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 1.29-1

      dsa · chrony · debian · 13

    • 4.6.1-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 1.29-1

      dsa · chrony · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]