CVE-2012-4503
cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive...
cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.
Exploit likelihood
What each source reports
NVD Score used
cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.
- Record
CVE-2012-4503- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.
- Record
CVE-2012-4503- Updated
- 2026-11-02
EUVDEUVD-2012-4432 No score
cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.
- Record
EUVD-2012-4432- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-53c9-c34f-h6w7 No score
cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive...
cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.
- Record
GHSA-53c9-c34f-h6w7- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVBELL-CVE-2012-4503
CVE-2012-4503 does not affect BellSoft software
- Record
BELL-CVE-2012-4503- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
OSV No score
cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.
- Record
CVE-2012-4503- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4503 No score
cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.
- Record
DEBIAN-CVE-2012-4503- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10345-1 No score
chrony-2.4.1-1.1 on GA media
These are all security issues fixed in the chrony-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10345-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-4503 No score
cmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive information from stack memory via vectors related to (1) an invalid subnet in a RPY_SUBNETS_ACCESSED command to the handle_subnets_accessed function or (2) a RPY_CLIENT_ACCESSES command to the handle_client_accesses function when client logging is disabled, which causes uninitialized data to be included in a reply.
- Record
UBUNTU-CVE-2012-4503- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chronyDebian:12 |
before 1.29-1 | 1.29-1 |
chronyDebian:13 |
before 1.29-1 | 1.29-1 |
chronyDebian:14 |
before 1.29-1 | 1.29-1 |
chronyDebian:6.0 |
before 1.24-3+squeeze1, plus listed versions 1.24-3 |
1.24-3+squeeze1 |
chronyDebian:7 |
before 1.24-3.1+deb7u2, plus listed versions 1.24-3.1+deb7u1 |
1.24-3.1+deb7u2 |
chronyopenSUSE:Tumbleweed |
before 2.4.1-1.1 | 2.4.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-4503 is a medium vulnerability (CVSS 5.0) in Tuxfamily Chrony, published September 18, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.08%, the 87th percentile. Fixed in chrony 1.29-1.
References
permalink.gmane.org/gmane.comp.time.chrony.announce/15
debian.org/security/2013/dsa-2760
seclists.org/oss-sec/2013/q3/332
git.tuxfamily.org/chrony/chrony.git?p=chrony/chrony.git%3Ba=commitdiff%3Bh=c6fdeeb6bb0b17dc28c19ae492c4a1c498e54ea3
bugzilla.redhat.com/show_bug.cgi?id=846392
nvd.nist.gov/vuln/detail/CVE-2012-4503
Show 10 moreShow less
github.com/advisories/GHSA-53c9-c34f-h6w7
docs.bell-sw.com/security/cves/CVE-2012-4503
security-tracker.debian.org/tracker/CVE-2012-4503
ubuntu.com/security/CVE-2012-4503
cve.org/CVERecord?id=CVE-2012-4503
suse.com/security/cve/CVE-2012-4502