{"id":"CVE-2016-1567","aliases":["DEBIAN-CVE-2016-1567","DLA-414-1","DLA-742-1","EUVD-2016-2662","GHSA-vwxj-hm98-qj7v","MGASA-2016-0038","UBUNTU-CVE-2016-1567","openSUSE-SU-2024:10345-1"],"status":"published","title":"chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when...","description":"chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"","severity":{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03159,"percentile":0.88062,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-254"],"published":"2016-01-26T19:00:00Z","modified":"2026-09-22T07:00:39Z","fixes":[{"ecosystem":"Debian:12","package":"chrony","fixed_in":["2.2.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"chrony","fixed_in":["2.2.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"chrony","fixed_in":["2.2.1-1"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"chrony","fixed_in":["1.24-3+squeeze3"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"chrony","fixed_in":["1.24-3.1+deb7u4"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"chrony","fixed_in":["1.31.2-1.mga5"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"chrony","fixed_in":["1.29-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"chrony","fixed_in":["2.1.1-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"chrony","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"chrony","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"chrony","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"chrony","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24-3+squeeze3"}]}],"versions":["1.24-3","1.24-3+squeeze1","1.24-3+squeeze2"]},{"source":"osv","ecosystem":"Debian:7","package":"chrony","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24-3.1+deb7u4"}]}],"versions":["1.24-3.1+deb7u1","1.24-3.1+deb7u2","1.24-3.1+deb7u3"]},{"source":"osv","ecosystem":"Mageia:5","package":"chrony","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.2-1.mga5"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"chrony","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29-1ubuntu0.1"}]}],"versions":["1.26-4","1.29-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"chrony","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-1ubuntu0.1"}]}],"versions":["1.30-2","1.31.1-2","2.1.1-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"chrony","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-1.1"}]}],"bundled":4}],"products":[{"vendor":"tuxfamily","product":"chrony"}],"references":[{"url":"http://www.talosintel.com/reports/TALOS-2016-0071/","tags":["x_refsource_MISC","x_transferred","Exploit","evidence","web","report"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176559.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175969.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Patch","fix","report"]},{"url":"http://chrony.tuxfamily.org/news.html#_20_jan_2016_chrony_2_2_1_and_chrony_1_31_2_released","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1567"},{"url":"http://www.talosintel.com/reports/TALOS-2016-0071"},{"url":"https://github.com/advisories/GHSA-vwxj-hm98-qj7v"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-1567","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0038.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17605","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1567","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1567","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1567","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-1567","description":"chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"","status":"published","published":"2016-01-26T19:00:00Z","modified":"2024-08-05T23:02:11.769Z","updated_at":"2026-11-02T14:33:35.841056Z"}],"euvd":[{"id":"EUVD-2016-2662","description":"chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"","status":"published","published":"2016-01-26T19:00:00Z","modified":"2024-08-05T23:02:11Z","updated_at":"2026-11-03T02:22:56.986033Z"}],"ghsa":[{"id":"GHSA-vwxj-hm98-qj7v","title":"chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when...","description":"chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"","status":"published","published":"2022-05-17T03:29:24Z","modified":"2025-04-12T12:56:28Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:01:25.259545Z"}],"nvd":[{"id":"CVE-2016-1567","description":"chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"","status":"published","published":"2016-01-26T19:59:08.577Z","modified":"2026-06-17T00:42:10.85Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-254"],"updated_at":"2026-11-02T14:03:21.143462Z"}],"osv":[{"id":"CVE-2016-1567","description":"chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"","status":"published","published":"2016-01-26T19:59:08.577Z","modified":"2026-04-16T06:21:22.455639257Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:02.114472Z"},{"id":"DEBIAN-CVE-2016-1567","description":"chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"","status":"published","published":"2016-01-26T19:59:08.577Z","modified":"2026-09-22T07:00:39.299385915Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"UBUNTU-CVE-2016-1567","description":"chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"","status":"published","published":"2016-01-26T19:59:00Z","modified":"2025-09-08T16:43:36Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.492576Z"},{"id":"DLA-414-1","title":"chrony - security update","status":"published","published":"2016-02-12T00:00:00Z","modified":"2026-03-09T01:19:55.229841Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DLA-742-1","title":"chrony - security update","status":"published","published":"2016-12-13T00:00:00Z","modified":"2026-03-09T02:11:05.266226Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"MGASA-2016-0038","title":"Updated chrony packages fix security vulnerability","description":"In chrony before 1.31.2, when used with symmetric key encryption, the\nclient would accept packets encrypted with keys for any configured server,\nallowing a server to impersonate other servers to clients, thus performing\na man-in-the-middle attack (CVE-2016-1567).\n","status":"published","published":"2016-01-29T11:02:50Z","modified":"2026-04-16T06:25:06.680010832Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10345-1","title":"chrony-2.4.1-1.1 on GA media","description":"These are all security issues fixed in the chrony-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:02:32.739537Z","updated_at":"2026-11-02T16:58:34.487567Z"}]}}