{"action":"Upgrade chrony to 1.30-2 or later.","affected":[{"fixed":"1.30-2","introduced":"0"}],"component":"chrony","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.30-2"],"id":"tcs_01M5NB4YSNKDBNJQ5SGPWDHFVJ","modified_at":"2026-09-09T07:00:22.058659393Z","published_at":"2019-12-09T19:15:14.150Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-1853","https://security-tracker.debian.org/tracker/CVE-2015-1853"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-1853#Debian:14/chrony","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-1853"}],"summary":"chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service (in"}