CVE-2015-1822

chrony before 1.31.1 does not initialize the last “next” pointer when
saving unacknowledged replies to command requests, which allows remote
authenticated users to cause a denial of service (uninitialized pointer
dereference and daemon crash) or possibly execute arbitrary code via a
large number of command requests.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=782160&gt;