CVE-2014-0021: Chrony Project Chrony

High severity, CVSS 7.5. EPSS: 4.2% chance of exploitation in the next 30 days.

Chrony before 1.29.1 has traffic amplification in cmdmon protocol

Affected products

• Chrony Project Chrony: before 1.29 (fixed in 1.29)
• Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
• Fedoraproject Fedora: version 19 only; version 20 only

Published 2019-11-15. Last modified 2026-06-17.