CVE-2016-1567
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when...
CVE-2016-1567 is a high vulnerability (CVSS 8.1) in Tuxfamily Chrony, published January 26, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.03%, the 87th percentile. Fixed in chrony 2.2.1-1.
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
- Record
CVE-2016-1567- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-254
- Updated
- 2026-11-02
CVE List No score
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
- Record
CVE-2016-1567- Updated
- 2026-11-02
EUVDEUVD-2016-2662 No score
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
- Record
EUVD-2016-2662- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vwxj-hm98-qj7v
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when...
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
- Record
GHSA-vwxj-hm98-qj7v- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
- Record
CVE-2016-1567- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-1567
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
- Record
DEBIAN-CVE-2016-1567- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-1567
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
- Record
UBUNTU-CVE-2016-1567- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2016-0038 No score
Updated chrony packages fix security vulnerability
In chrony before 1.31.2, when used with symmetric key encryption, the client would accept packets encrypted with keys for any configured server, allowing a server to impersonate other servers to clients, thus performing a man-in-the-middle attack (CVE-2016-1567).
- Record
MGASA-2016-0038- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10345-1 No score
chrony-2.4.1-1.1 on GA media
These are all security issues fixed in the chrony-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10345-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chronyDebian:12 |
before 2.2.1-1 | 2.2.1-1 |
chronyDebian:13 |
before 2.2.1-1 | 2.2.1-1 |
chronyDebian:14 |
before 2.2.1-1 | 2.2.1-1 |
chronyDebian:6.0 |
before 1.24-3+squeeze3, plus listed versions 1.24-31.24-3+squeeze11.24-3+squeeze2 |
1.24-3+squeeze3 |
chronyDebian:7 |
before 1.24-3.1+deb7u4, plus listed versions 1.24-3.1+deb7u11.24-3.1+deb7u21.24-3.1+deb7u3 |
1.24-3.1+deb7u4 |
chronyMageia:5 |
before 1.31.2-1.mga5 | 1.31.2-1.mga5 |
chronyUbuntu:14.04:LTS |
before 1.29-1ubuntu0.1, plus listed versions 1.26-41.29-1 |
1.29-1ubuntu0.1 |
chronyUbuntu:16.04:LTS |
before 2.1.1-1ubuntu0.1, plus listed versions 1.30-21.31.1-22.1.1-1 |
2.1.1-1ubuntu0.1 |
chronyopenSUSE:Tumbleweed |
before 2.4.1-1.1 | 2.4.1-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
talosintel.com/reports/TALOS-2016-0071
lists.fedoraproject.org/pipermail/package-announce/2016-February/176559.html
chrony.tuxfamily.org/news.html
nvd.nist.gov/vuln/detail/CVE-2016-1567
github.com/advisories/GHSA-vwxj-hm98-qj7v
Show 9 moreShow less
security-tracker.debian.org/tracker/CVE-2016-1567
advisories.mageia.org/MGASA-2016-0038.html
bugs.mageia.org/show_bug.cgi?id=17605
ubuntu.com/security/CVE-2016-1567
cve.org/CVERecord?id=CVE-2016-1567
suse.com/security/cve/CVE-2012-4502