CVE-2020-14367

Name of the Vulnerable Software and Affected Versions: chrony versions prior to 3.5.1

Description: A flaw in chrony allows an attacker with privileged access to create a symlink with the default PID file name, pointing to any destination file in the system. This results in data loss and a denial of service due to path traversal. The issue is related to the creation of the PID file under the /var/run/chrony folder during chronyd startup. The vulnerability can be exploited to overwrite any file in the system, compromising the isolation level in chrony.

Recommendations: For chrony versions prior to 3.5.1, update to version 3.5.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the /var/run/chrony folder to prevent symlink creation. Additionally, monitor system logs for suspicious activity related to the chronyd process.